last executing test programs: 2.926490666s ago: executing program 3 (id=1008): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000000000, 0x7}, 0x113915, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9902000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800000000000000", 0x5c}, {&(0x7f00000000c0)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bfe64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b3544067", 0xbd}, {&(0x7f0000000280)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5950020", 0xd4}, {&(0x7f0000000380)="fd7617adb877574c4a4489fcaccde0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d17897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e31a8fc9833d521b95c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc6", 0xaa}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.800099926s ago: executing program 3 (id=1011): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f941a3c92b", 0x14}], 0x1}, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x10000000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.676204296s ago: executing program 1 (id=1013): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x58, &(0x7f0000000080)}, 0x10) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8923, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}}, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r4}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0xa, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, 0x0, r5}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0x0, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="c46d46c12fc01b0e8eedf00c3bfefd030023df80c375c597e3ba21dd7b9a9ce5e27280778af2fe0cc10880abd18c823e54aa8b0fbfa194c16b62af1e29d569e6b7c0b28ad67bf58867d6c033041f4c9171e1554eb77a985988a34cdbab5b46e9565ddacf"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_type(r5, &(0x7f0000000300), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x70cb0}], 0xc}, 0x1f00) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0xa, 0x2, 0x3a) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r11) 2.485665791s ago: executing program 2 (id=1015): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x81, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0xa4, 0x0}, 0x8040) socket$kcm(0x2, 0x1, 0x84) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4004) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.477185072s ago: executing program 1 (id=1016): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000028000000c"], 0x48) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0xd, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000540)='rpm_return_int\x00', r2}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) (async) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x400}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x8903, &(0x7f00000005c0)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 1.681759815s ago: executing program 2 (id=1020): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000000000, 0x7}, 0x113915, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9902000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800000000000000", 0x5c}, {&(0x7f00000000c0)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bfe64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b3544067", 0xbd}, {&(0x7f0000000280)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5950020", 0xd4}, {&(0x7f0000000380)="fd7617adb877574c4a4489fcaccde0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d17897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e31a8fc9833d521b95c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc6", 0xaa}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.560717205s ago: executing program 3 (id=1021): bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000001000)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000280), 0x12) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1dfb02108098e068886dd000033", 0x0, 0xadf4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.410706067s ago: executing program 3 (id=1022): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000140)}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="10001d"], 0x0}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x2}, {0x2}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1a, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc0000000}, @jmp={0x5, 0x1, 0xc, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x130, 0x130, 0xa, [@var={0x3, 0x0, 0x0, 0xe, 0x1, 0x2}, @const={0x2, 0x0, 0x0, 0xa, 0x4}, @enum64={0x2, 0x3, 0x0, 0x13, 0x1, 0x5, [{0xa, 0x3ff, 0x8000}, {0xd, 0x5, 0x9}, {0xb, 0x800, 0x7}]}, @struct={0x3, 0x9, 0x0, 0x4, 0x1, 0x8, [{0x4, 0x0, 0xffff}, {0x8, 0x2, 0x200}, {0x2, 0x5, 0x3}, {0xb, 0x2, 0x45c}, {0x10, 0x5}, {0x3, 0x4, 0x9}, {0xa, 0x2, 0xe6}, {0xe, 0x5, 0x2}, {0xc, 0x1, 0xffffff81}]}, @ptr={0x10, 0x0, 0x0, 0x2, 0x1}, @fwd={0x1}, @enum64={0x3, 0x6, 0x0, 0x13, 0x1, 0x2, [{0xd, 0x7fffffff, 0x2100}, {0xf, 0x101, 0x9}, {0x3, 0x4, 0x8}, {0x3, 0x5, 0x81}, {0xb, 0x7, 0x2}, {0xd, 0x1000000, 0x37fe}]}]}, {0x0, [0x30, 0x0, 0x61, 0x5f, 0x0, 0x2e, 0x2e, 0x0]}}, &(0x7f0000000400)=""/173, 0x152, 0xad, 0x1, 0x3, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x11, 0x8, 0x1d, 0x3ff, 0xa0, r5, 0x4, '\x00', 0x0, r6, 0x0, 0x5}, 0x50) close(r4) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000100)=[{0x20, 0x84, 0x2, "fe8041000000000092"}], 0x20}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000048009125745c7388641f9c0e0a"], 0xfe33) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r8, 0x2c) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x20) 1.402354467s ago: executing program 2 (id=1031): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x2, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x18, 0x800, 0x3, &(0x7f0000000540)) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="8500000060000000760000000000000027000000000000009500000000000000ed5f0be3755142ae31484cd0115bab2d0589e8ab9f429b60317312f13bd708a35c0670c61fc97c4551f58ae3bbfb9f1d97582f15f3922a3c39716ebdd3c864aec6bc39f3bf389d21e614314b44d3a320471dc33ceec91a1512761160808845c885e7e75118ae8702a167ce7d0ca850e435f105f4c7702c8505fc4669acef909579390b1a6795fae716b04fba77244be06160107ab2a3a30645bbec6570170c1d362e6d6209fa0809ffbcc48bfa0175374dc3"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x2b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a11800152c280014", 0x1f}], 0x1}, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x33fe0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0xc, &(0x7f0000000500)=ANY=[@ANYRESOCT=r2, @ANYRES16=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0xb543c89392a76206, 0x8, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0xb, 0x0, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000006840)={r10, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x60}, 0x50) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000740)=ANY=[@ANYRESDEC=r9, @ANYRESHEX, @ANYRES8=r8, @ANYRESHEX=r7], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000180)=r11, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x8}, 0x50) 1.24171988s ago: executing program 0 (id=1023): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000), 0xfe3a) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000040000000200000000000007000000000100000000000000000110008500000000020000000200000000000000005f4f0000000000000000"], 0x0, 0x4c, 0x0, 0xa}, 0x28) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x420d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000000000000000000510", 0x1d}], 0x1}, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x33fe0) (async) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)="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", 0xd8}], 0x1, 0x0, 0xfffffffffffffff9}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r3, @ANYBLOB="0200"/20, @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="00000000031600000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@xdp={0x2c, 0x8, r5, 0x2c}, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=[{0x20, 0x114, 0xb1, "a4a3b99d1ff954140fa862"}, {0x90, 0x1, 0x10000, "8fcfc020c3dd027a44f7231e3d74f36c3b0ceeb8bae74fc8fd9f1444e6cfd05cca21b2d6be0216cb913ed1f8b0482cbd24a5e65678bca90f75f4974a1bd8c33976deebbf5b8b422f6354d6927ba62377bd95f0daff150fa8a658cd5e31d430ae9a9f36623bf29047c9b725713d74092e0a2e3f83a518c728209dadf4d4b92cea"}], 0xb0}, 0x800) 1.24129468s ago: executing program 2 (id=1024): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1300000006000000", @ANYRES32, @ANYBLOB="56f68aca667258e2fe1f3d81bc96b21e49e2831d5a8cff97c4ae54c6e65373c84db17be97bec6ecf533bf6b49c4ec4c4c42ce86fd11bf23168553e09e9f78df66bb7aac7d5e6b9e0013f0b1280472049860fd35b6ce8db3d18d58bb704073b4b92293782c62522b0f7be34e239cf0d43f84a93c7b1dc5d67dec684b4278580033987b333707861f4a2567ba971318eaf34e79cc88ac83706af15b57b4f494df62522016fb4e8d7d566a9b899ed1fbd2b3d736bc0b6db5191f4da630cd3301762ad67499033f3992a0f94310f382799a0d45646e2a5a346c7c1f392a8dc48228456", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x408, 0xca, 0x0, 0x2, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)=""/247, 0xf7}], 0x1, 0x0, 0xf7}, 0x10140) 1.11392154s ago: executing program 0 (id=1025): perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x100008, 0x0, 0x0, 0x6, 0x9, 0x1000, 0x0, 0x0, 0x7f, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x11123, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x10, 0xf, 0x4) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000004c0)="00ff03076003008cb89e08f088a8ccf63780", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x400000002, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x9}}, 0x10, 0x0}, 0x44) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000300)='syz1\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0xc, 0x2000}, 0x20) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bc09080000000000b60a0100000000000f0000000000000018010000646c6c2500000000002020207b9af8ff000000002d9100000000000037010080f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 996.65515ms ago: executing program 2 (id=1026): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x94) 898.292078ms ago: executing program 1 (id=1027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20c80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 897.613218ms ago: executing program 0 (id=1028): r0 = socket$kcm(0x2, 0x2, 0x73) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0xffa4, 0x17, 0x0, 0x0) 870.97829ms ago: executing program 2 (id=1030): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x0, '\x00', 0x0, 0x0, 0x200000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="100000000400000004000000010000000000", @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000ef00"/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r3, 0x58, &(0x7f0000000080)={0x0, 0x0}}, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r4}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0xa, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, 0x0, r5}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0x0, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="c46d46c12fc01b0e8eedf00c3bfefd030023df80c375c597e3ba21dd7b9a9ce5e27280778af2fe0cc10880abd18c823e54aa8b0fbfa194c16b62af1e29d569e6b7c0b28ad67bf58867d6c033041f4c9171e1554eb77a985988a34cdbab5b46e9565ddacf"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_type(r5, &(0x7f0000000300), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x70cb0}], 0xc}, 0x1f00) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0xa, 0x2, 0x3a) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r11) 677.648966ms ago: executing program 1 (id=1032): bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000001000)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000280), 0x12) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1dfb02108098e068886dd000033", 0x0, 0xadf4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 672.665046ms ago: executing program 0 (id=1040): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x94) 568.818034ms ago: executing program 1 (id=1033): r0 = socket$kcm(0x2, 0x2, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000fcffffff000000000000000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:'], 0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9041c5d0800fe007c05e8fe55a1080001000002010000000000080005007a010401a80016002000034004020000035c0461c9d6694f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653765eaa48185e2a380d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xb4ef}, 0x100904, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x7, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x17, 0x0, 0x0) write$cgroup_devices(r3, &(0x7f0000000180)={'c', ' *:* ', 'r\x00'}, 0x8) 560.002265ms ago: executing program 0 (id=1034): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000010006bcc9e3be35c6e17aa31076b876c1d000000000000000000000304001ac00800120004000500020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48054) (fail_nth: 9) 101.281881ms ago: executing program 3 (id=1035): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_clone(0x2240200, &(0x7f0000000180)="f2356c08c17cc95f853b13e742f418f7a161daa54d283221133423bb82d0e7fd793ca37f694efd0960c91d1a9a2b3dfea75afd4c7b3b4e", 0x37, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000900)="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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1700000007000000ec04009ac0f9ab6fe04969e50000ff000000000000", @ANYRES32=0x1, @ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r6, &(0x7f00000000c0), 0x12) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r8 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_pressure(r8, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000f9788c80000000000400000018430000ffffffff000000f80000000085100000fdffffff360100002020732500000000002020207b1af8ff00000000bfa1000000000000070143330ea9330ffe32000008000000b703"], &(0x7f0000000600)='GPL\x00', 0x2, 0xa5, &(0x7f0000000540)=""/165, 0x41000, 0x40, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000003c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xa, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000740)=[r1, r6, r6, r1], &(0x7f00000006c0)=[{0x5, 0x1, 0xf, 0xc}, {0x4, 0x1, 0x10, 0x4}, {0x3, 0x5, 0x0, 0xc}, {0x1, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0x5}, {0x5, 0x5, 0x1, 0x6}, {0x3, 0x2, 0xb, 0x8}], 0x10, 0x5}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 5.901319ms ago: executing program 0 (id=1036): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_config_ext={0x77ffffff, 0x6b2}, 0x2000, 0x7, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x9, 0x6, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1812"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) (fail_nth: 7) 0s ago: executing program 1 (id=1037): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80102, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x18944, 0x401, 0x80025, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10004102}, 0x52cc) kernel console output (not intermixed with test programs): acquire+0x7c80/0x7c80 [ 98.547722][ T6549] should_fail_ex+0x39d/0x4d0 [ 98.552446][ T6549] _copy_from_user+0x2f/0xe0 [ 98.557243][ T6549] ___sys_sendmsg+0x159/0x290 [ 98.561956][ T6549] ? __sys_sendmsg+0x270/0x270 [ 98.566952][ T6549] ? __lock_acquire+0x7c80/0x7c80 [ 98.572038][ T6549] __se_sys_sendmsg+0x1a5/0x270 [ 98.577057][ T6549] ? __x64_sys_sendmsg+0x80/0x80 [ 98.582290][ T6549] ? trace_sys_enter+0x1f/0x80 [ 98.587102][ T6549] do_syscall_64+0x55/0xb0 [ 98.591730][ T6549] ? clear_bhb_loop+0x40/0x90 [ 98.596617][ T6549] ? clear_bhb_loop+0x40/0x90 [ 98.601528][ T6549] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.607455][ T6549] RIP: 0033:0x7fae9b78ebe9 [ 98.611897][ T6549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.632068][ T6549] RSP: 002b:00007fae9c576038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.640643][ T6549] RAX: ffffffffffffffda RBX: 00007fae9b9b5fa0 RCX: 00007fae9b78ebe9 [ 98.648721][ T6549] RDX: 0000000000008080 RSI: 0000200000000000 RDI: 0000000000000004 [ 98.656698][ T6549] RBP: 00007fae9c576090 R08: 0000000000000000 R09: 0000000000000000 [ 98.664687][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.672756][ T6549] R13: 00007fae9b9b6038 R14: 00007fae9b9b5fa0 R15: 00007ffe4f2a36c8 [ 98.680764][ T6549] [ 98.696669][ T6553] FAULT_INJECTION: forcing a failure. [ 98.696669][ T6553] name failslab, interval 1, probability 0, space 0, times 0 [ 98.710349][ T6553] CPU: 0 PID: 6553 Comm: syz.1.288 Not tainted 6.6.102-syzkaller #0 [ 98.718439][ T6553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.728768][ T6553] Call Trace: [ 98.732045][ T6553] [ 98.735069][ T6553] dump_stack_lvl+0x16c/0x230 [ 98.739932][ T6553] ? show_regs_print_info+0x20/0x20 [ 98.745132][ T6553] ? load_image+0x3b0/0x3b0 [ 98.749769][ T6553] ? __might_sleep+0xe0/0xe0 [ 98.754369][ T6553] ? __lock_acquire+0x7c80/0x7c80 [ 98.759388][ T6553] ? rcu_is_watching+0x15/0xb0 [ 98.764171][ T6553] should_fail_ex+0x39d/0x4d0 [ 98.769043][ T6553] should_failslab+0x9/0x20 [ 98.773632][ T6553] slab_pre_alloc_hook+0x59/0x310 [ 98.779072][ T6553] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 98.785167][ T6553] __kmem_cache_alloc_node+0x53/0x260 [ 98.790799][ T6553] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 98.796708][ T6553] kmalloc_trace+0x2a/0xe0 [ 98.801244][ T6553] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 98.807009][ T6553] sctp_association_new+0x15d3/0x25c0 [ 98.812494][ T6553] sctp_connect_new_asoc+0x2bf/0x690 [ 98.817805][ T6553] ? __sctp_connect+0xd20/0xd20 [ 98.822938][ T6553] ? __local_bh_enable_ip+0x12e/0x1c0 [ 98.828595][ T6553] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 98.834340][ T6553] ? security_sctp_bind_connect+0x89/0xb0 [ 98.840189][ T6553] sctp_sendmsg+0x155c/0x27e0 [ 98.845153][ T6553] ? sctp_getsockopt+0xb60/0xb60 [ 98.850093][ T6553] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 98.855853][ T6553] ? aa_sk_perm+0x7fc/0x930 [ 98.860359][ T6553] ? aa_af_perm+0x2b0/0x2b0 [ 98.864904][ T6553] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 98.871351][ T6553] ? sock_rps_record_flow+0x19/0x400 [ 98.876729][ T6553] ? inet_send_prepare+0x260/0x260 [ 98.882133][ T6553] ? inet_sendmsg+0xe9/0x2f0 [ 98.886727][ T6553] ? inet_send_prepare+0x260/0x260 [ 98.892071][ T6553] ____sys_sendmsg+0x5bf/0x950 [ 98.897002][ T6553] ? __asan_memset+0x22/0x40 [ 98.901616][ T6553] ? __sys_sendmsg_sock+0x30/0x30 [ 98.906659][ T6553] ? __import_iovec+0x5f2/0x860 [ 98.911809][ T6553] ? import_iovec+0x73/0xa0 [ 98.916403][ T6553] ___sys_sendmsg+0x220/0x290 [ 98.921129][ T6553] ? __sys_sendmsg+0x270/0x270 [ 98.926009][ T6553] ? __lock_acquire+0x7c80/0x7c80 [ 98.931071][ T6553] __se_sys_sendmsg+0x1a5/0x270 [ 98.935933][ T6553] ? __x64_sys_sendmsg+0x80/0x80 [ 98.940916][ T6553] ? trace_sys_enter+0x1f/0x80 [ 98.945720][ T6553] do_syscall_64+0x55/0xb0 [ 98.950227][ T6553] ? clear_bhb_loop+0x40/0x90 [ 98.954908][ T6553] ? clear_bhb_loop+0x40/0x90 [ 98.959584][ T6553] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.965488][ T6553] RIP: 0033:0x7f3a1838ebe9 [ 98.969991][ T6553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.989971][ T6553] RSP: 002b:00007f3a191ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.998429][ T6553] RAX: ffffffffffffffda RBX: 00007f3a185b5fa0 RCX: 00007f3a1838ebe9 [ 99.006603][ T6553] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 99.014634][ T6553] RBP: 00007f3a191ac090 R08: 0000000000000000 R09: 0000000000000000 [ 99.022603][ T6553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.030596][ T6553] R13: 00007f3a185b6038 R14: 00007f3a185b5fa0 R15: 00007ffc15953248 [ 99.038685][ T6553] [ 99.228171][ T6561] netlink: 132 bytes leftover after parsing attributes in process `syz.2.292'. [ 99.744640][ T6579] FAULT_INJECTION: forcing a failure. [ 99.744640][ T6579] name failslab, interval 1, probability 0, space 0, times 0 [ 99.768449][ T6579] CPU: 0 PID: 6579 Comm: syz.2.300 Not tainted 6.6.102-syzkaller #0 [ 99.776578][ T6579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 99.787061][ T6579] Call Trace: [ 99.790376][ T6579] [ 99.793474][ T6579] dump_stack_lvl+0x16c/0x230 [ 99.798294][ T6579] ? stack_trace_snprint+0xf0/0xf0 [ 99.803525][ T6579] ? show_regs_print_info+0x20/0x20 [ 99.808847][ T6579] ? load_image+0x3b0/0x3b0 [ 99.813399][ T6579] should_fail_ex+0x39d/0x4d0 [ 99.818382][ T6579] should_failslab+0x9/0x20 [ 99.823005][ T6579] slab_pre_alloc_hook+0x59/0x310 [ 99.828233][ T6579] ? __hw_addr_add_ex+0x1f4/0x760 [ 99.833309][ T6579] __kmem_cache_alloc_node+0x53/0x260 [ 99.838702][ T6579] ? __hw_addr_add_ex+0x1f4/0x760 [ 99.843845][ T6579] kmalloc_trace+0x2a/0xe0 [ 99.848383][ T6579] __hw_addr_add_ex+0x1f4/0x760 [ 99.853248][ T6579] dev_addr_init+0x150/0x230 [ 99.857842][ T6579] ? dev_addr_flush+0x210/0x210 [ 99.862808][ T6579] alloc_netdev_mqs+0x2e4/0x1040 [ 99.867912][ T6579] ? IP6_ECN_decapsulate+0x1790/0x1790 [ 99.873398][ T6579] ip6_tnl_locate+0x656/0x800 [ 99.878359][ T6579] ? ip6_tnl_parm_from_user+0x340/0x340 [ 99.883991][ T6579] ? __might_fault+0xaa/0x120 [ 99.888666][ T6579] ? __might_fault+0xc6/0x120 [ 99.893362][ T6579] ? __might_fault+0xaa/0x120 [ 99.898142][ T6579] ? ip6_tnl_siocdevprivate+0x605/0xac0 [ 99.903704][ T6579] ip6_tnl_siocdevprivate+0x629/0xac0 [ 99.909166][ T6579] ? ip6_tnl_start_xmit+0x1140/0x1140 [ 99.914634][ T6579] ? rcu_is_watching+0x15/0xb0 [ 99.919402][ T6579] ? full_name_hash+0x92/0xe0 [ 99.924092][ T6579] dev_ifsioc+0xae6/0xe20 [ 99.928595][ T6579] ? dev_ioctl+0x1170/0x1170 [ 99.933374][ T6579] ? dev_load+0x21/0x1f0 [ 99.937608][ T6579] ? dev_load+0x21/0x1f0 [ 99.941896][ T6579] dev_ioctl+0x87a/0x1170 [ 99.946327][ T6579] sock_ioctl+0x726/0x7a0 [ 99.950684][ T6579] ? sock_poll+0x3d0/0x3d0 [ 99.955168][ T6579] ? bpf_lsm_file_ioctl+0x9/0x10 [ 99.960372][ T6579] ? security_file_ioctl+0x80/0xa0 [ 99.965830][ T6579] ? sock_poll+0x3d0/0x3d0 [ 99.970245][ T6579] __se_sys_ioctl+0xfd/0x170 [ 99.974832][ T6579] do_syscall_64+0x55/0xb0 [ 99.979332][ T6579] ? clear_bhb_loop+0x40/0x90 [ 99.983999][ T6579] ? clear_bhb_loop+0x40/0x90 [ 99.988665][ T6579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.994556][ T6579] RIP: 0033:0x7fae9b78ebe9 [ 99.998963][ T6579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.018585][ T6579] RSP: 002b:00007fae9c576038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.027271][ T6579] RAX: ffffffffffffffda RBX: 00007fae9b9b5fa0 RCX: 00007fae9b78ebe9 [ 100.035411][ T6579] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000006 [ 100.043551][ T6579] RBP: 00007fae9c576090 R08: 0000000000000000 R09: 0000000000000000 [ 100.051890][ T6579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.059868][ T6579] R13: 00007fae9b9b6038 R14: 00007fae9b9b5fa0 R15: 00007ffe4f2a36c8 [ 100.067865][ T6579] [ 100.316560][ T6588] syzkaller0: entered promiscuous mode [ 100.348881][ T6588] syzkaller0: entered allmulticast mode [ 100.740327][ T6604] FAULT_INJECTION: forcing a failure. [ 100.740327][ T6604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.777387][ T6604] CPU: 1 PID: 6604 Comm: syz.3.309 Not tainted 6.6.102-syzkaller #0 [ 100.785699][ T6604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.795957][ T6604] Call Trace: [ 100.799260][ T6604] [ 100.802397][ T6604] dump_stack_lvl+0x16c/0x230 [ 100.807112][ T6604] ? show_regs_print_info+0x20/0x20 [ 100.812430][ T6604] ? load_image+0x3b0/0x3b0 [ 100.816964][ T6604] ? __might_fault+0xaa/0x120 [ 100.821757][ T6604] ? __lock_acquire+0x7c80/0x7c80 [ 100.826831][ T6604] should_fail_ex+0x39d/0x4d0 [ 100.831537][ T6604] _copy_from_user+0x2f/0xe0 [ 100.836233][ T6604] kstrtouint_from_user+0xc2/0x150 [ 100.841373][ T6604] ? kstrtol_from_user+0x150/0x150 [ 100.846609][ T6604] proc_fail_nth_write+0x89/0x240 [ 100.851913][ T6604] ? proc_fail_nth_read+0x250/0x250 [ 100.857292][ T6604] ? proc_fail_nth_read+0x250/0x250 [ 100.862511][ T6604] vfs_write+0x288/0x940 [ 100.866756][ T6604] ? file_end_write+0x250/0x250 [ 100.871599][ T6604] ? __fget_files+0x28/0x4d0 [ 100.876237][ T6604] ? __fget_files+0x44a/0x4d0 [ 100.881027][ T6604] ? __fdget_pos+0x2a3/0x330 [ 100.885630][ T6604] ? ksys_write+0x75/0x250 [ 100.890065][ T6604] ksys_write+0x147/0x250 [ 100.894492][ T6604] ? __ia32_sys_read+0x90/0x90 [ 100.899269][ T6604] ? lockdep_hardirqs_on+0x98/0x150 [ 100.904571][ T6604] do_syscall_64+0x55/0xb0 [ 100.908981][ T6604] ? clear_bhb_loop+0x40/0x90 [ 100.913922][ T6604] ? clear_bhb_loop+0x40/0x90 [ 100.918610][ T6604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.924587][ T6604] RIP: 0033:0x7f218638d69f [ 100.929096][ T6604] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 100.948790][ T6604] RSP: 002b:00007f21845f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 100.957290][ T6604] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f218638d69f [ 100.965257][ T6604] RDX: 0000000000000001 RSI: 00007f21845f60a0 RDI: 0000000000000007 [ 100.973219][ T6604] RBP: 00007f21845f6090 R08: 0000000000000000 R09: 0000000000000000 [ 100.981266][ T6604] R10: 0000200000001400 R11: 0000000000000293 R12: 0000000000000001 [ 100.989320][ T6604] R13: 00007f21865b6128 R14: 00007f21865b6090 R15: 00007fffedf84678 [ 100.997417][ T6604] [ 101.704655][ T6615] FAULT_INJECTION: forcing a failure. [ 101.704655][ T6615] name failslab, interval 1, probability 0, space 0, times 0 [ 101.722694][ T6615] CPU: 0 PID: 6615 Comm: syz.3.315 Not tainted 6.6.102-syzkaller #0 [ 101.730884][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.741036][ T6615] Call Trace: [ 101.744341][ T6615] [ 101.747262][ T6615] dump_stack_lvl+0x16c/0x230 [ 101.752035][ T6615] ? lock_chain_count+0x20/0x20 [ 101.756996][ T6615] ? show_regs_print_info+0x20/0x20 [ 101.762295][ T6615] ? load_image+0x3b0/0x3b0 [ 101.766880][ T6615] ? lockdep_hardirqs_on+0x98/0x150 [ 101.772090][ T6615] should_fail_ex+0x39d/0x4d0 [ 101.776782][ T6615] should_failslab+0x9/0x20 [ 101.781311][ T6615] slab_pre_alloc_hook+0x59/0x310 [ 101.786382][ T6615] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 101.792293][ T6615] __kmem_cache_alloc_node+0x53/0x260 [ 101.797996][ T6615] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 101.804253][ T6615] kmalloc_trace+0x2a/0xe0 [ 101.808697][ T6615] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 101.814441][ T6615] sctp_association_new+0x15d3/0x25c0 [ 101.819919][ T6615] sctp_connect_new_asoc+0x2bf/0x690 [ 101.825309][ T6615] ? __sctp_connect+0xd20/0xd20 [ 101.830339][ T6615] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 101.835885][ T6615] ? security_sctp_bind_connect+0x89/0xb0 [ 101.841692][ T6615] sctp_sendmsg+0x155c/0x27e0 [ 101.846463][ T6615] ? sctp_getsockopt+0xb60/0xb60 [ 101.851572][ T6615] ? lock_chain_count+0x20/0x20 [ 101.856528][ T6615] ? sctp_getsockopt+0xb60/0xb60 [ 101.861483][ T6615] ? inet_send_prepare+0x260/0x260 [ 101.866599][ T6615] ____sys_sendmsg+0x5bf/0x950 [ 101.871399][ T6615] ? __asan_memset+0x22/0x40 [ 101.876163][ T6615] ? __sys_sendmsg_sock+0x30/0x30 [ 101.881279][ T6615] ? __import_iovec+0x5f2/0x860 [ 101.886241][ T6615] ? import_iovec+0x73/0xa0 [ 101.890834][ T6615] ___sys_sendmsg+0x220/0x290 [ 101.895523][ T6615] ? __sys_sendmsg+0x270/0x270 [ 101.900497][ T6615] __se_sys_sendmsg+0x1a5/0x270 [ 101.905343][ T6615] ? __x64_sys_sendmsg+0x80/0x80 [ 101.910305][ T6615] ? lockdep_hardirqs_on+0x98/0x150 [ 101.915530][ T6615] do_syscall_64+0x55/0xb0 [ 101.920054][ T6615] ? clear_bhb_loop+0x40/0x90 [ 101.924724][ T6615] ? clear_bhb_loop+0x40/0x90 [ 101.929405][ T6615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.935469][ T6615] RIP: 0033:0x7f218638ebe9 [ 101.939881][ T6615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.959497][ T6615] RSP: 002b:00007f21845d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.967918][ T6615] RAX: ffffffffffffffda RBX: 00007f21865b6180 RCX: 00007f218638ebe9 [ 101.975905][ T6615] RDX: 00000000040080c0 RSI: 00002000000003c0 RDI: 0000000000000006 [ 101.984066][ T6615] RBP: 00007f21845d5090 R08: 0000000000000000 R09: 0000000000000000 [ 101.992035][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.000213][ T6615] R13: 00007f21865b6218 R14: 00007f21865b6180 R15: 00007fffedf84678 [ 102.008227][ T6615] [ 102.812951][ T6609] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.312'. [ 103.389910][ T6633] warning: `syz.1.321' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.599340][ T6641] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.326'. [ 104.560198][ T6664] FAULT_INJECTION: forcing a failure. [ 104.560198][ T6664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.641541][ T6664] CPU: 0 PID: 6664 Comm: syz.3.334 Not tainted 6.6.102-syzkaller #0 [ 104.650163][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.660263][ T6664] Call Trace: [ 104.663656][ T6664] [ 104.666614][ T6664] dump_stack_lvl+0x16c/0x230 [ 104.671358][ T6664] ? show_regs_print_info+0x20/0x20 [ 104.676621][ T6664] ? load_image+0x3b0/0x3b0 [ 104.681243][ T6664] ? __might_fault+0xaa/0x120 [ 104.686036][ T6664] ? __lock_acquire+0x7c80/0x7c80 [ 104.691264][ T6664] should_fail_ex+0x39d/0x4d0 [ 104.696021][ T6664] _copy_from_iter+0x1d3/0x1290 [ 104.700958][ T6664] ? __virt_addr_valid+0x18c/0x540 [ 104.706188][ T6664] ? __lock_acquire+0x7c80/0x7c80 [ 104.711387][ T6664] ? sock_alloc_send_pskb+0x875/0x990 [ 104.716761][ T6664] ? copyout_mc+0x70/0x70 [ 104.721172][ T6664] ? __virt_addr_valid+0x18c/0x540 [ 104.726458][ T6664] ? __virt_addr_valid+0x18c/0x540 [ 104.731587][ T6664] ? __virt_addr_valid+0x469/0x540 [ 104.736803][ T6664] ? __check_object_size+0x506/0xa30 [ 104.742184][ T6664] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 104.748197][ T6664] ? skb_put+0x11b/0x210 [ 104.752557][ T6664] tun_get_user+0x1583/0x3bf0 [ 104.757244][ T6664] ? trace_event_raw_event_lock+0x230/0x230 [ 104.763222][ T6664] ? aa_file_perm+0x120/0xec0 [ 104.767926][ T6664] ? aa_file_perm+0x3e8/0xec0 [ 104.772665][ T6664] ? rcu_read_unlock+0xa0/0xa0 [ 104.777525][ T6664] ? tun_get+0x1c/0x2e0 [ 104.781771][ T6664] ? __lock_acquire+0x7c80/0x7c80 [ 104.786815][ T6664] ? tun_get+0x1c/0x2e0 [ 104.790996][ T6664] tun_chr_write_iter+0x119/0x200 [ 104.796138][ T6664] vfs_write+0x43b/0x940 [ 104.800392][ T6664] ? file_end_write+0x250/0x250 [ 104.805247][ T6664] ? __fget_files+0x44a/0x4d0 [ 104.810327][ T6664] ? __fdget_pos+0x1d8/0x330 [ 104.815012][ T6664] ? ksys_write+0x75/0x250 [ 104.819617][ T6664] ksys_write+0x147/0x250 [ 104.823955][ T6664] ? __ia32_sys_read+0x90/0x90 [ 104.828717][ T6664] ? lockdep_hardirqs_on+0x98/0x150 [ 104.833921][ T6664] do_syscall_64+0x55/0xb0 [ 104.838504][ T6664] ? clear_bhb_loop+0x40/0x90 [ 104.843260][ T6664] ? clear_bhb_loop+0x40/0x90 [ 104.848016][ T6664] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.854107][ T6664] RIP: 0033:0x7f218638ebe9 [ 104.858709][ T6664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.878634][ T6664] RSP: 002b:00007f218711a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.887240][ T6664] RAX: ffffffffffffffda RBX: 00007f21865b5fa0 RCX: 00007f218638ebe9 [ 104.895319][ T6664] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 104.903677][ T6664] RBP: 00007f218711a090 R08: 0000000000000000 R09: 0000000000000000 [ 104.911745][ T6664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.919912][ T6664] R13: 00007f21865b6038 R14: 00007f21865b5fa0 R15: 00007fffedf84678 [ 104.927935][ T6664] [ 107.368312][ T6689] netlink: 'syz.3.344': attribute type 40 has an invalid length. [ 108.709458][ T6724] netlink: 'syz.0.356': attribute type 21 has an invalid length. [ 108.719720][ T6724] netlink: 156 bytes leftover after parsing attributes in process `syz.0.356'. [ 108.749918][ T6723] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.354'. [ 109.142820][ T6727] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 109.175138][ T6727] syzkaller0: entered promiscuous mode [ 109.180783][ T6727] syzkaller0: entered allmulticast mode [ 112.533009][ T6774] syz.2.374 (6774) used greatest stack depth: 20064 bytes left [ 113.351521][ T6756] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.366'. [ 113.747391][ T6798] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.384'. [ 114.789237][ T6821] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.392'. [ 115.480115][ T6840] netlink: 'syz.2.402': attribute type 10 has an invalid length. [ 115.524431][ T6840] FAULT_INJECTION: forcing a failure. [ 115.524431][ T6840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.576124][ T6840] CPU: 1 PID: 6840 Comm: syz.2.402 Not tainted 6.6.102-syzkaller #0 [ 115.584882][ T6840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.595599][ T6840] Call Trace: [ 115.598988][ T6840] [ 115.602116][ T6840] dump_stack_lvl+0x16c/0x230 [ 115.607001][ T6840] ? show_regs_print_info+0x20/0x20 [ 115.612325][ T6840] ? load_image+0x3b0/0x3b0 [ 115.616878][ T6840] ? __might_fault+0xaa/0x120 [ 115.621586][ T6840] should_fail_ex+0x39d/0x4d0 [ 115.626641][ T6840] copyin+0x1a/0x90 [ 115.630565][ T6840] _copy_from_iter+0x54f/0x1290 [ 115.635549][ T6840] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 115.641841][ T6840] ? copyout_mc+0x70/0x70 [ 115.646221][ T6840] ? __phys_addr_symbol+0x48/0x70 [ 115.651288][ T6840] ? __check_object_size+0x506/0xa30 [ 115.656770][ T6840] netlink_sendmsg+0x75c/0xbe0 [ 115.661550][ T6840] ? netlink_getsockopt+0x580/0x580 [ 115.667123][ T6840] ? lockdep_hardirqs_on+0x98/0x150 [ 115.672434][ T6840] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 115.678693][ T6840] ? aa_sock_msg_perm+0x94/0x150 [ 115.683814][ T6840] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 115.689197][ T6840] ? security_socket_sendmsg+0x80/0xa0 [ 115.695017][ T6840] ? netlink_getsockopt+0x580/0x580 [ 115.700385][ T6840] ____sys_sendmsg+0x5bf/0x950 [ 115.705579][ T6840] ? __asan_memset+0x22/0x40 [ 115.710369][ T6840] ? __sys_sendmsg_sock+0x30/0x30 [ 115.715424][ T6840] ? __import_iovec+0x3fa/0x860 [ 115.720283][ T6840] ? import_iovec+0x73/0xa0 [ 115.724881][ T6840] ___sys_sendmsg+0x220/0x290 [ 115.729561][ T6840] ? __sys_sendmsg+0x270/0x270 [ 115.734447][ T6840] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 115.740817][ T6840] __se_sys_sendmsg+0x1a5/0x270 [ 115.745766][ T6840] ? __x64_sys_sendmsg+0x80/0x80 [ 115.750708][ T6840] ? lockdep_hardirqs_on+0x98/0x150 [ 115.755911][ T6840] do_syscall_64+0x55/0xb0 [ 115.760321][ T6840] ? clear_bhb_loop+0x40/0x90 [ 115.765089][ T6840] ? clear_bhb_loop+0x40/0x90 [ 115.769933][ T6840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.775825][ T6840] RIP: 0033:0x7fae9b78ebe9 [ 115.780232][ T6840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.799869][ T6840] RSP: 002b:00007fae9c576038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.808285][ T6840] RAX: ffffffffffffffda RBX: 00007fae9b9b5fa0 RCX: 00007fae9b78ebe9 [ 115.816343][ T6840] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000009 [ 115.824404][ T6840] RBP: 00007fae9c576090 R08: 0000000000000000 R09: 0000000000000000 [ 115.832459][ T6840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.840421][ T6840] R13: 00007fae9b9b6038 R14: 00007fae9b9b5fa0 R15: 00007ffe4f2a36c8 [ 115.848577][ T6840] [ 116.044784][ T6847] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.406'. [ 117.742485][ T6887] FAULT_INJECTION: forcing a failure. [ 117.742485][ T6887] name failslab, interval 1, probability 0, space 0, times 0 [ 117.755375][ T6887] CPU: 1 PID: 6887 Comm: syz.2.422 Not tainted 6.6.102-syzkaller #0 [ 117.763492][ T6887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.773844][ T6887] Call Trace: [ 117.777141][ T6887] [ 117.780198][ T6887] dump_stack_lvl+0x16c/0x230 [ 117.785169][ T6887] ? show_regs_print_info+0x20/0x20 [ 117.790815][ T6887] ? load_image+0x3b0/0x3b0 [ 117.795419][ T6887] should_fail_ex+0x39d/0x4d0 [ 117.800104][ T6887] should_failslab+0x9/0x20 [ 117.804615][ T6887] slab_pre_alloc_hook+0x59/0x310 [ 117.809653][ T6887] ? skb_network_protocol+0x4ff/0x760 [ 117.815200][ T6887] kmem_cache_alloc+0x5a/0x2e0 [ 117.819962][ T6887] ? skb_clone+0x1eb/0x370 [ 117.824409][ T6887] skb_clone+0x1eb/0x370 [ 117.828654][ T6887] ? dev_queue_xmit_nit+0x235/0xbb0 [ 117.833860][ T6887] dev_queue_xmit_nit+0x24d/0xbb0 [ 117.838886][ T6887] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 117.844323][ T6887] ? validate_xmit_skb+0x953/0xf50 [ 117.849617][ T6887] dev_hard_start_xmit+0x148/0x740 [ 117.854749][ T6887] __dev_queue_xmit+0x1a64/0x35a0 [ 117.859956][ T6887] ? __virt_addr_valid+0x18c/0x540 [ 117.865507][ T6887] ? __dev_queue_xmit+0x245/0x35a0 [ 117.870633][ T6887] ? netdev_core_pick_tx+0x340/0x340 [ 117.876100][ T6887] ? packet_parse_headers+0x7c8/0xad0 [ 117.881508][ T6887] ? packet_parse_headers+0x868/0xad0 [ 117.886987][ T6887] ? __virt_addr_valid+0x18c/0x540 [ 117.892208][ T6887] ? __check_object_size+0x506/0xa30 [ 117.897497][ T6887] ? skb_setup_tx_timestamp+0x1e0/0x1e0 [ 117.903217][ T6887] ? skb_copy_datagram_from_iter+0x5f6/0x6e0 [ 117.909215][ T6887] ? packet_xmit+0x66/0x330 [ 117.913732][ T6887] ? packet_sendmsg+0x3a04/0x4d30 [ 117.918815][ T6887] packet_sendmsg+0x3b47/0x4d30 [ 117.923772][ T6887] ? __might_sleep+0xe0/0xe0 [ 117.928364][ T6887] ? verify_lock_unused+0x140/0x140 [ 117.933648][ T6887] ? aa_sk_perm+0x7fc/0x930 [ 117.938148][ T6887] ? packet_getsockopt+0xa20/0xa20 [ 117.943265][ T6887] ? aa_sock_msg_perm+0x94/0x150 [ 117.948205][ T6887] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 117.953480][ T6887] ? security_socket_sendmsg+0x80/0xa0 [ 117.958939][ T6887] ? packet_getsockopt+0xa20/0xa20 [ 117.964057][ T6887] ____sys_sendmsg+0x5bf/0x950 [ 117.968838][ T6887] ? __asan_memset+0x22/0x40 [ 117.973453][ T6887] ? __sys_sendmsg_sock+0x30/0x30 [ 117.978611][ T6887] ? __import_iovec+0x3fa/0x860 [ 117.983528][ T6887] ? import_iovec+0x73/0xa0 [ 117.988047][ T6887] ___sys_sendmsg+0x220/0x290 [ 117.992741][ T6887] ? __sys_sendmsg+0x270/0x270 [ 117.997522][ T6887] ? __lock_acquire+0x7c80/0x7c80 [ 118.002729][ T6887] __se_sys_sendmsg+0x1a5/0x270 [ 118.007753][ T6887] ? __x64_sys_sendmsg+0x80/0x80 [ 118.012711][ T6887] ? lockdep_hardirqs_on+0x98/0x150 [ 118.017905][ T6887] do_syscall_64+0x55/0xb0 [ 118.022316][ T6887] ? clear_bhb_loop+0x40/0x90 [ 118.027070][ T6887] ? clear_bhb_loop+0x40/0x90 [ 118.031912][ T6887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.037858][ T6887] RIP: 0033:0x7fae9b78ebe9 [ 118.042391][ T6887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.062188][ T6887] RSP: 002b:00007fae9c576038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.070715][ T6887] RAX: ffffffffffffffda RBX: 00007fae9b9b5fa0 RCX: 00007fae9b78ebe9 [ 118.078691][ T6887] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 118.086664][ T6887] RBP: 00007fae9c576090 R08: 0000000000000000 R09: 0000000000000000 [ 118.094717][ T6887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.102683][ T6887] R13: 00007fae9b9b6038 R14: 00007fae9b9b5fa0 R15: 00007ffe4f2a36c8 [ 118.111009][ T6887] [ 119.252649][ T6923] netlink: 'syz.2.437': attribute type 10 has an invalid length. [ 119.260435][ T6923] netlink: 40 bytes leftover after parsing attributes in process `syz.2.437'. [ 119.317660][ T6923] batman_adv: batadv0: Adding interface: virt_wifi0 [ 119.344966][ T6923] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.400817][ T6923] batman_adv: batadv0: Interface activated: virt_wifi0 [ 120.381875][ T6942] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 120.455821][ T6942] syzkaller0: entered promiscuous mode [ 120.472147][ T6942] syzkaller0: entered allmulticast mode [ 120.487288][ T6955] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.448'. [ 120.576436][ T6958] netlink: 'syz.1.449': attribute type 3 has an invalid length. [ 120.594780][ T6958] netlink: 'syz.1.449': attribute type 1 has an invalid length. [ 120.612193][ T6958] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.449'. [ 121.113294][ T6966] netlink: 60 bytes leftover after parsing attributes in process `syz.3.452'. [ 121.348726][ T6969] netlink: 'syz.3.452': attribute type 3 has an invalid length. [ 121.370180][ T6969] netlink: 'syz.3.452': attribute type 1 has an invalid length. [ 121.393746][ T6969] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.452'. [ 121.647871][ T6976] FAULT_INJECTION: forcing a failure. [ 121.647871][ T6976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.661762][ T6976] CPU: 0 PID: 6976 Comm: syz.0.455 Not tainted 6.6.102-syzkaller #0 [ 121.669793][ T6976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.679962][ T6976] Call Trace: [ 121.683246][ T6976] [ 121.686179][ T6976] dump_stack_lvl+0x16c/0x230 [ 121.690950][ T6976] ? show_regs_print_info+0x20/0x20 [ 121.696231][ T6976] ? load_image+0x3b0/0x3b0 [ 121.700829][ T6976] ? __might_fault+0xaa/0x120 [ 121.705502][ T6976] ? __lock_acquire+0x7c80/0x7c80 [ 121.710610][ T6976] should_fail_ex+0x39d/0x4d0 [ 121.715299][ T6976] _copy_to_user+0x2f/0xa0 [ 121.719906][ T6976] bpf_obj_get_info_by_fd+0x2843/0x2d90 [ 121.725517][ T6976] ? bpf_map_get_fd_by_id+0x310/0x310 [ 121.730900][ T6976] ? __might_fault+0xaa/0x120 [ 121.735695][ T6976] ? perf_trace_lock+0xf7/0x380 [ 121.740694][ T6976] ? trace_event_raw_event_lock+0x230/0x230 [ 121.747002][ T6976] ? file_end_write+0x159/0x250 [ 121.752149][ T6976] ? __might_fault+0xaa/0x120 [ 121.756841][ T6976] ? __might_fault+0xc6/0x120 [ 121.761518][ T6976] ? __might_fault+0xaa/0x120 [ 121.766372][ T6976] ? bpf_lsm_bpf+0x9/0x10 [ 121.770868][ T6976] ? security_bpf+0x7e/0xa0 [ 121.775369][ T6976] __sys_bpf+0x781/0x800 [ 121.779733][ T6976] ? bpf_link_show_fdinfo+0x350/0x350 [ 121.785475][ T6976] ? lock_chain_count+0x20/0x20 [ 121.790796][ T6976] __x64_sys_bpf+0x7c/0x90 [ 121.795215][ T6976] do_syscall_64+0x55/0xb0 [ 121.799748][ T6976] ? clear_bhb_loop+0x40/0x90 [ 121.804423][ T6976] ? clear_bhb_loop+0x40/0x90 [ 121.809102][ T6976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.815436][ T6976] RIP: 0033:0x7f221078ebe9 [ 121.820091][ T6976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.839798][ T6976] RSP: 002b:00007f2211573038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 121.848216][ T6976] RAX: ffffffffffffffda RBX: 00007f22109b5fa0 RCX: 00007f221078ebe9 [ 121.856366][ T6976] RDX: 0000000000000010 RSI: 0000200000000780 RDI: 000000000000000f [ 121.864531][ T6976] RBP: 00007f2211573090 R08: 0000000000000000 R09: 0000000000000000 [ 121.872508][ T6976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.880495][ T6976] R13: 00007f22109b6038 R14: 00007f22109b5fa0 R15: 00007fffb51f7618 [ 121.888492][ T6976] [ 123.017515][ T6966] netlink: 60 bytes leftover after parsing attributes in process `syz.3.452'. [ 123.031909][ T6982] sit0: entered allmulticast mode [ 123.056829][ T6984] sit0: entered promiscuous mode [ 123.225328][ T6989] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.460'. [ 123.757114][ T7017] FAULT_INJECTION: forcing a failure. [ 123.757114][ T7017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.861581][ T7017] CPU: 0 PID: 7017 Comm: syz.1.468 Not tainted 6.6.102-syzkaller #0 [ 123.869723][ T7017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.880080][ T7017] Call Trace: [ 123.883377][ T7017] [ 123.886316][ T7017] dump_stack_lvl+0x16c/0x230 [ 123.891011][ T7017] ? show_regs_print_info+0x20/0x20 [ 123.896307][ T7017] ? load_image+0x3b0/0x3b0 [ 123.900917][ T7017] ? __might_fault+0xaa/0x120 [ 123.905612][ T7017] ? __lock_acquire+0x7c80/0x7c80 [ 123.910788][ T7017] should_fail_ex+0x39d/0x4d0 [ 123.915510][ T7017] _copy_from_iter+0x1d3/0x1290 [ 123.920463][ T7017] ? __kmem_cache_alloc_node+0x13e/0x260 [ 123.926500][ T7017] ? __virt_addr_valid+0x18c/0x540 [ 123.931743][ T7017] ? __lock_acquire+0x7c80/0x7c80 [ 123.936795][ T7017] ? copyout_mc+0x70/0x70 [ 123.941141][ T7017] ? __virt_addr_valid+0x18c/0x540 [ 123.946360][ T7017] ? __virt_addr_valid+0x18c/0x540 [ 123.951488][ T7017] ? __virt_addr_valid+0x469/0x540 [ 123.957053][ T7017] ? __check_object_size+0x506/0xa30 [ 123.962371][ T7017] tipc_msg_build+0x82c/0xe80 [ 123.967167][ T7017] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 123.973264][ T7017] ? net_generic+0x1e/0x240 [ 123.977880][ T7017] ? tipc_group_bc_cong+0x15c/0x210 [ 123.983456][ T7017] tipc_send_group_bcast+0x768/0xa70 [ 123.988877][ T7017] ? tipc_wait_for_connect+0x640/0x640 [ 123.994651][ T7017] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 124.000376][ T7017] ? wait_woken+0x180/0x180 [ 124.004915][ T7017] __tipc_sendmsg+0x2e1/0x2940 [ 124.009878][ T7017] ? __lock_acquire+0x1334/0x7c80 [ 124.014941][ T7017] ? rht_unlock+0x1c0/0x1c0 [ 124.019602][ T7017] ? aa_label_sk_perm+0x3ec/0x500 [ 124.024665][ T7017] ? verify_lock_unused+0x140/0x140 [ 124.029970][ T7017] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 124.035624][ T7017] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 124.041195][ T7017] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 124.047843][ T7017] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 124.054493][ T7017] ? mark_lock+0x94/0x320 [ 124.059036][ T7017] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 124.065055][ T7017] ? __local_bh_enable_ip+0x12e/0x1c0 [ 124.070451][ T7017] ? lockdep_hardirqs_on+0x98/0x150 [ 124.075680][ T7017] ? __local_bh_enable_ip+0x12e/0x1c0 [ 124.081213][ T7017] ? _local_bh_enable+0xa0/0xa0 [ 124.086101][ T7017] tipc_sendmsg+0x55/0x70 [ 124.090544][ T7017] sock_write_iter+0x2bb/0x3f0 [ 124.095536][ T7017] ? sock_read_iter+0x3b0/0x3b0 [ 124.100504][ T7017] ? common_file_perm+0x198/0x1f0 [ 124.105729][ T7017] vfs_write+0x43b/0x940 [ 124.110123][ T7017] ? file_end_write+0x250/0x250 [ 124.115182][ T7017] ? __fget_files+0x44a/0x4d0 [ 124.119983][ T7017] ? __fdget_pos+0x1d8/0x330 [ 124.125049][ T7017] ? ksys_write+0x75/0x250 [ 124.129492][ T7017] ksys_write+0x147/0x250 [ 124.133846][ T7017] ? __ia32_sys_read+0x90/0x90 [ 124.138992][ T7017] ? lockdep_hardirqs_on+0x98/0x150 [ 124.144309][ T7017] do_syscall_64+0x55/0xb0 [ 124.148753][ T7017] ? clear_bhb_loop+0x40/0x90 [ 124.153530][ T7017] ? clear_bhb_loop+0x40/0x90 [ 124.158318][ T7017] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.164378][ T7017] RIP: 0033:0x7f3a1838ebe9 [ 124.168816][ T7017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.188628][ T7017] RSP: 002b:00007f3a1918b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.197076][ T7017] RAX: ffffffffffffffda RBX: 00007f3a185b6090 RCX: 00007f3a1838ebe9 [ 124.205068][ T7017] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000004 [ 124.213153][ T7017] RBP: 00007f3a1918b090 R08: 0000000000000000 R09: 0000000000000000 [ 124.221254][ T7017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.229334][ T7017] R13: 00007f3a185b6128 R14: 00007f3a185b6090 R15: 00007ffc15953248 [ 124.237466][ T7017] [ 124.332736][ T7022] netlink: 830 bytes leftover after parsing attributes in process `syz.2.470'. [ 124.939043][ T7029] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.472'. [ 125.244500][ T42] wlan1: Trigger new scan to find an IBSS to join [ 126.611586][ T7035] FAULT_INJECTION: forcing a failure. [ 126.611586][ T7035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.752361][ T7035] CPU: 0 PID: 7035 Comm: syz.2.473 Not tainted 6.6.102-syzkaller #0 [ 126.760409][ T7035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.770665][ T7035] Call Trace: [ 126.773966][ T7035] [ 126.776927][ T7035] dump_stack_lvl+0x16c/0x230 [ 126.781625][ T7035] ? show_regs_print_info+0x20/0x20 [ 126.786843][ T7035] ? load_image+0x3b0/0x3b0 [ 126.791370][ T7035] ? __might_fault+0xaa/0x120 [ 126.796063][ T7035] ? __lock_acquire+0x7c80/0x7c80 [ 126.801186][ T7035] ? __local_bh_enable_ip+0x12e/0x1c0 [ 126.806672][ T7035] ? _local_bh_enable+0xa0/0xa0 [ 126.811540][ T7035] should_fail_ex+0x39d/0x4d0 [ 126.816248][ T7035] copy_fpstate_to_sigframe+0x97b/0xbe0 [ 126.821911][ T7035] ? kmem_cache_free+0xf8/0x280 [ 126.826864][ T7035] ? __dequeue_signal+0x52b/0x680 [ 126.831972][ T7035] ? dequeue_signal+0xe9/0x4b0 [ 126.836730][ T7035] ? copy_fpstate_to_sigframe+0x17b/0xbe0 [ 126.842450][ T7035] ? fpregs_set+0x330/0x330 [ 126.847020][ T7035] ? get_signal+0x11f5/0x1400 [ 126.851702][ T7035] ? perf_trace_lock+0xf7/0x380 [ 126.856580][ T7035] ? fpu__alloc_mathframe+0xa7/0x130 [ 126.861989][ T7035] get_sigframe+0x5ce/0x7c0 [ 126.866538][ T7035] ? load_gs_index+0x190/0x190 [ 126.871331][ T7035] ? lockdep_hardirqs_on+0x98/0x150 [ 126.876559][ T7035] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 126.882236][ T7035] x64_setup_rt_frame+0x158/0xcd0 [ 126.887274][ T7035] ? _raw_spin_unlock_irq+0x29/0x50 [ 126.892578][ T7035] ? _raw_spin_unlock_irq+0x2e/0x50 [ 126.897882][ T7035] ? get_signal+0x11a0/0x1400 [ 126.902568][ T7035] ? sigaltstack_size_valid+0x1e0/0x1e0 [ 126.908128][ T7035] arch_do_signal_or_restart+0x3e5/0x780 [ 126.913759][ T7035] ? get_sigframe_size+0x20/0x20 [ 126.918703][ T7035] ? ksys_write+0x1f2/0x250 [ 126.923322][ T7035] ? exit_to_user_mode_loop+0x3b/0x110 [ 126.928803][ T7035] exit_to_user_mode_loop+0x70/0x110 [ 126.934224][ T7035] exit_to_user_mode_prepare+0xb1/0x140 [ 126.939783][ T7035] syscall_exit_to_user_mode+0x1a/0x50 [ 126.945344][ T7035] do_syscall_64+0x61/0xb0 [ 126.949756][ T7035] ? clear_bhb_loop+0x40/0x90 [ 126.954428][ T7035] ? clear_bhb_loop+0x40/0x90 [ 126.959110][ T7035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.965023][ T7035] RIP: 0033:0x7fae9b78d69f [ 126.969465][ T7035] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 126.989347][ T7035] RSP: 002b:00007fae9c576030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 126.997846][ T7035] RAX: 0000000000000001 RBX: 0000000000000006 RCX: 00007fae9b78d69f [ 127.005809][ T7035] RDX: 0000000000000001 RSI: 00007fae9c576090 RDI: 0000000000000006 [ 127.013825][ T7035] RBP: 00007fae9c576090 R08: 0000000000000000 R09: 00007fae9c575df7 [ 127.021894][ T7035] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 127.030153][ T7035] R13: 00007fae9b9b6038 R14: 00007fae9b9b5fa0 R15: 00007ffe4f2a36c8 [ 127.038327][ T7035] [ 129.163839][ T11] wlan1: Trigger new scan to find an IBSS to join [ 129.298829][ T7084] netlink: 'syz.0.496': attribute type 2 has an invalid length. [ 129.313648][ T7084] netlink: 132 bytes leftover after parsing attributes in process `syz.0.496'. [ 129.723449][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.503'. [ 130.119721][ T7112] FAULT_INJECTION: forcing a failure. [ 130.119721][ T7112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.135045][ T1132] wlan1: Creating new IBSS network, BSSID ca:13:1e:f1:b7:3a [ 130.167299][ T7112] CPU: 1 PID: 7112 Comm: syz.1.508 Not tainted 6.6.102-syzkaller #0 [ 130.175596][ T7112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.185758][ T7112] Call Trace: [ 130.189127][ T7112] [ 130.192070][ T7112] dump_stack_lvl+0x16c/0x230 [ 130.196837][ T7112] ? show_regs_print_info+0x20/0x20 [ 130.202116][ T7112] ? load_image+0x3b0/0x3b0 [ 130.206626][ T7112] ? __lock_acquire+0x7c80/0x7c80 [ 130.211911][ T7112] ? __virt_addr_valid+0x18c/0x540 [ 130.217027][ T7112] should_fail_ex+0x39d/0x4d0 [ 130.221768][ T7112] _copy_from_user+0x2f/0xe0 [ 130.226356][ T7112] bpf_test_init+0xf9/0x150 [ 130.230889][ T7112] bpf_prog_test_run_xdp+0x382/0xfa0 [ 130.236379][ T7112] ? dev_put+0x80/0x80 [ 130.240481][ T7112] ? dev_put+0x80/0x80 [ 130.244566][ T7112] bpf_prog_test_run+0x321/0x390 [ 130.249512][ T7112] __sys_bpf+0x440/0x800 [ 130.253756][ T7112] ? bpf_link_show_fdinfo+0x350/0x350 [ 130.259217][ T7112] ? lock_chain_count+0x20/0x20 [ 130.264153][ T7112] __x64_sys_bpf+0x7c/0x90 [ 130.268566][ T7112] do_syscall_64+0x55/0xb0 [ 130.273101][ T7112] ? clear_bhb_loop+0x40/0x90 [ 130.277789][ T7112] ? clear_bhb_loop+0x40/0x90 [ 130.282468][ T7112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.288370][ T7112] RIP: 0033:0x7f3a1838ebe9 [ 130.292820][ T7112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.312608][ T7112] RSP: 002b:00007f3a1918b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 130.321021][ T7112] RAX: ffffffffffffffda RBX: 00007f3a185b6090 RCX: 00007f3a1838ebe9 [ 130.329008][ T7112] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 130.337075][ T7112] RBP: 00007f3a1918b090 R08: 0000000000000000 R09: 0000000000000000 [ 130.345051][ T7112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.353025][ T7112] R13: 00007f3a185b6128 R14: 00007f3a185b6090 R15: 00007ffc15953248 [ 130.361126][ T7112] [ 130.900568][ T7126] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.514'. [ 130.961710][ T7128] netlink: 'syz.1.515': attribute type 3 has an invalid length. [ 130.969654][ T7128] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.515'. [ 131.089832][ T7130] FAULT_INJECTION: forcing a failure. [ 131.089832][ T7130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.121381][ T7130] CPU: 1 PID: 7130 Comm: syz.0.516 Not tainted 6.6.102-syzkaller #0 [ 131.129439][ T7130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.139525][ T7130] Call Trace: [ 131.142832][ T7130] [ 131.145780][ T7130] dump_stack_lvl+0x16c/0x230 [ 131.150491][ T7130] ? show_regs_print_info+0x20/0x20 [ 131.155891][ T7130] ? load_image+0x3b0/0x3b0 [ 131.160527][ T7130] ? __might_fault+0xaa/0x120 [ 131.165400][ T7130] ? __lock_acquire+0x7c80/0x7c80 [ 131.170453][ T7130] should_fail_ex+0x39d/0x4d0 [ 131.175168][ T7130] _copy_from_user+0x2f/0xe0 [ 131.179787][ T7130] kstrtouint_from_user+0xc2/0x150 [ 131.184939][ T7130] ? kstrtol_from_user+0x150/0x150 [ 131.190182][ T7130] proc_fail_nth_write+0x89/0x240 [ 131.195227][ T7130] ? proc_fail_nth_read+0x250/0x250 [ 131.200539][ T7130] ? proc_fail_nth_read+0x250/0x250 [ 131.205893][ T7130] vfs_write+0x288/0x940 [ 131.210178][ T7130] ? file_end_write+0x250/0x250 [ 131.215153][ T7130] ? __fget_files+0x28/0x4d0 [ 131.219862][ T7130] ? __fget_files+0x44a/0x4d0 [ 131.224723][ T7130] ? __fdget_pos+0x2a3/0x330 [ 131.229337][ T7130] ? ksys_write+0x75/0x250 [ 131.233793][ T7130] ksys_write+0x147/0x250 [ 131.238154][ T7130] ? __ia32_sys_read+0x90/0x90 [ 131.242947][ T7130] ? lockdep_hardirqs_on+0x98/0x150 [ 131.248163][ T7130] do_syscall_64+0x55/0xb0 [ 131.252587][ T7130] ? clear_bhb_loop+0x40/0x90 [ 131.257268][ T7130] ? clear_bhb_loop+0x40/0x90 [ 131.261947][ T7130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.267852][ T7130] RIP: 0033:0x7f221078d69f [ 131.272257][ T7130] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 131.291875][ T7130] RSP: 002b:00007f2211573030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 131.300287][ T7130] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f221078d69f [ 131.308251][ T7130] RDX: 0000000000000001 RSI: 00007f22115730a0 RDI: 0000000000000006 [ 131.316215][ T7130] RBP: 00007f2211573090 R08: 0000000000000000 R09: 0000000000000000 [ 131.324201][ T7130] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 131.332189][ T7130] R13: 00007f22109b6038 R14: 00007f22109b5fa0 R15: 00007fffb51f7618 [ 131.340284][ T7130] [ 131.409965][ T7141] sit0: entered allmulticast mode [ 131.536398][ T7132] sit0: entered promiscuous mode [ 131.821246][ T7154] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.525'. [ 132.199980][ T7162] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.537'. [ 132.738096][ T7186] netlink: 'syz.0.535': attribute type 29 has an invalid length. [ 132.761601][ T7186] netlink: 'syz.0.535': attribute type 29 has an invalid length. [ 132.816469][ T7180] netlink: 'syz.0.535': attribute type 29 has an invalid length. [ 132.842972][ T7180] netlink: 'syz.0.535': attribute type 29 has an invalid length. [ 132.872214][ T7180] netlink: 'syz.0.535': attribute type 29 has an invalid length. [ 133.166450][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.172895][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.301914][ T7200] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.542'. [ 133.327391][ T7196] sit0: entered allmulticast mode [ 133.377880][ T7198] sit0: entered promiscuous mode [ 134.169240][ T7212] netlink: 'syz.1.547': attribute type 29 has an invalid length. [ 134.178083][ T7212] netlink: 'syz.1.547': attribute type 29 has an invalid length. [ 134.196287][ T7212] netlink: 'syz.1.547': attribute type 29 has an invalid length. [ 134.433575][ T7220] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.552'. [ 134.580567][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.553'. [ 134.665392][ T7226] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.555'. [ 134.807522][ T7226] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.555'. [ 134.903298][ T7235] validate_nla: 2 callbacks suppressed [ 134.903314][ T7235] netlink: 'syz.1.558': attribute type 2 has an invalid length. [ 134.943102][ T7235] netlink: 'syz.1.558': attribute type 8 has an invalid length. [ 134.970955][ T7235] netlink: 132 bytes leftover after parsing attributes in process `syz.1.558'. [ 135.342134][ T7255] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.564'. [ 135.386967][ T7257] netlink: 'syz.3.563': attribute type 29 has an invalid length. [ 135.401251][ T7257] netlink: 'syz.3.563': attribute type 29 has an invalid length. [ 135.415197][ T7257] netlink: 'syz.3.563': attribute type 29 has an invalid length. [ 135.459048][ T7252] netlink: 'syz.3.563': attribute type 29 has an invalid length. [ 135.470546][ T7252] netlink: 'syz.3.563': attribute type 29 has an invalid length. [ 135.703035][ T7270] netlink: 60 bytes leftover after parsing attributes in process `syz.2.568'. [ 135.712994][ T7270] netlink: 60 bytes leftover after parsing attributes in process `syz.2.568'. [ 135.724829][ T7268] netlink: 60 bytes leftover after parsing attributes in process `syz.2.568'. [ 135.735425][ T7270] netlink: 60 bytes leftover after parsing attributes in process `syz.2.568'. [ 136.150381][ T7273] FAULT_INJECTION: forcing a failure. [ 136.150381][ T7273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.175227][ T7273] CPU: 1 PID: 7273 Comm: syz.3.571 Not tainted 6.6.102-syzkaller #0 [ 136.183361][ T7273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 136.193793][ T7273] Call Trace: [ 136.197183][ T7273] [ 136.200211][ T7273] dump_stack_lvl+0x16c/0x230 [ 136.204915][ T7273] ? show_regs_print_info+0x20/0x20 [ 136.210210][ T7273] ? load_image+0x3b0/0x3b0 [ 136.214739][ T7273] ? __might_fault+0xaa/0x120 [ 136.219523][ T7273] ? __lock_acquire+0x7c80/0x7c80 [ 136.224571][ T7273] should_fail_ex+0x39d/0x4d0 [ 136.229464][ T7273] _copy_from_user+0x2f/0xe0 [ 136.234091][ T7273] kstrtouint_from_user+0xc2/0x150 [ 136.239473][ T7273] ? kstrtol_from_user+0x150/0x150 [ 136.244714][ T7273] proc_fail_nth_write+0x89/0x240 [ 136.249760][ T7273] ? proc_fail_nth_read+0x250/0x250 [ 136.255013][ T7273] ? proc_fail_nth_read+0x250/0x250 [ 136.260251][ T7273] vfs_write+0x288/0x940 [ 136.264536][ T7273] ? file_end_write+0x250/0x250 [ 136.269410][ T7273] ? __fget_files+0x28/0x4d0 [ 136.274023][ T7273] ? __fget_files+0x44a/0x4d0 [ 136.278735][ T7273] ? __fdget_pos+0x2a3/0x330 [ 136.283428][ T7273] ? ksys_write+0x75/0x250 [ 136.287861][ T7273] ksys_write+0x147/0x250 [ 136.292225][ T7273] ? __ia32_sys_read+0x90/0x90 [ 136.297092][ T7273] ? lockdep_hardirqs_on+0x98/0x150 [ 136.302447][ T7273] do_syscall_64+0x55/0xb0 [ 136.306887][ T7273] ? clear_bhb_loop+0x40/0x90 [ 136.311594][ T7273] ? clear_bhb_loop+0x40/0x90 [ 136.316567][ T7273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.322674][ T7273] RIP: 0033:0x7f218638d69f [ 136.324261][ T7280] netlink: 132 bytes leftover after parsing attributes in process `syz.2.570'. [ 136.327102][ T7273] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 136.327142][ T7273] RSP: 002b:00007f218711a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 136.364560][ T7273] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f218638d69f [ 136.372649][ T7273] RDX: 0000000000000001 RSI: 00007f218711a0a0 RDI: 0000000000000005 [ 136.381003][ T7273] RBP: 00007f218711a090 R08: 0000000000000000 R09: 0000000000000000 [ 136.389280][ T7273] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 136.397530][ T7273] R13: 00007f21865b6038 R14: 00007f21865b5fa0 R15: 00007fffedf84678 [ 136.405546][ T7273] [ 136.411994][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.569'. [ 137.144996][ T7295] netlink: 'syz.3.575': attribute type 10 has an invalid length. [ 137.238390][ T7295] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 137.389246][ T7295] syz.3.575 (7295) used greatest stack depth: 19880 bytes left [ 137.472847][ T7303] netlink: 'syz.2.576': attribute type 29 has an invalid length. [ 137.480937][ T7303] netlink: 'syz.2.576': attribute type 29 has an invalid length. [ 137.726175][ T7307] netlink: 132 bytes leftover after parsing attributes in process `syz.1.580'. [ 137.867470][ T7315] FAULT_INJECTION: forcing a failure. [ 137.867470][ T7315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.887372][ T7315] CPU: 0 PID: 7315 Comm: syz.0.582 Not tainted 6.6.102-syzkaller #0 [ 137.895419][ T7315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 137.905491][ T7315] Call Trace: [ 137.908773][ T7315] [ 137.911716][ T7315] dump_stack_lvl+0x16c/0x230 [ 137.916413][ T7315] ? show_regs_print_info+0x20/0x20 [ 137.921647][ T7315] ? load_image+0x3b0/0x3b0 [ 137.926169][ T7315] ? __might_fault+0xaa/0x120 [ 137.930951][ T7315] ? __lock_acquire+0x7c80/0x7c80 [ 137.936085][ T7315] should_fail_ex+0x39d/0x4d0 [ 137.940912][ T7315] _copy_from_iter+0x1d3/0x1290 [ 137.945800][ T7315] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 137.951987][ T7315] ? lockdep_hardirqs_on+0x98/0x150 [ 137.957396][ T7315] ? copyout_mc+0x70/0x70 [ 137.961740][ T7315] ? __check_object_size+0x506/0xa30 [ 137.967121][ T7315] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 137.972901][ T7315] ? skb_put+0x11b/0x210 [ 137.977153][ T7315] tun_get_user+0x1583/0x3bf0 [ 137.981863][ T7315] ? trace_event_raw_event_lock+0x230/0x230 [ 137.988208][ T7315] ? aa_file_perm+0x120/0xec0 [ 137.992900][ T7315] ? aa_file_perm+0x3e8/0xec0 [ 137.997597][ T7315] ? rcu_read_unlock+0xa0/0xa0 [ 138.002365][ T7315] ? tun_get+0x1c/0x2e0 [ 138.006532][ T7315] ? __lock_acquire+0x7c80/0x7c80 [ 138.011700][ T7315] ? tun_get+0x1c/0x2e0 [ 138.016022][ T7315] tun_chr_write_iter+0x119/0x200 [ 138.021121][ T7315] vfs_write+0x43b/0x940 [ 138.025410][ T7315] ? file_end_write+0x250/0x250 [ 138.030394][ T7315] ? __fdget_pos+0x1b1/0x330 [ 138.035174][ T7315] ? __fdget_pos+0x1d8/0x330 [ 138.039768][ T7315] ? ksys_write+0x75/0x250 [ 138.044379][ T7315] ksys_write+0x147/0x250 [ 138.048817][ T7315] ? __ia32_sys_read+0x90/0x90 [ 138.053590][ T7315] ? lockdep_hardirqs_on+0x98/0x150 [ 138.058798][ T7315] do_syscall_64+0x55/0xb0 [ 138.063209][ T7315] ? clear_bhb_loop+0x40/0x90 [ 138.068007][ T7315] ? clear_bhb_loop+0x40/0x90 [ 138.072707][ T7315] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.078708][ T7315] RIP: 0033:0x7f221078ebe9 [ 138.083130][ T7315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.103172][ T7315] RSP: 002b:00007f2211573038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 138.111874][ T7315] RAX: ffffffffffffffda RBX: 00007f22109b5fa0 RCX: 00007f221078ebe9 [ 138.120319][ T7315] RDX: 000000000000fdef RSI: 00002000000004c0 RDI: 00000000000000c8 [ 138.128515][ T7315] RBP: 00007f2211573090 R08: 0000000000000000 R09: 0000000000000000 [ 138.136502][ T7315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.144478][ T7315] R13: 00007f22109b6038 R14: 00007f22109b5fa0 R15: 00007fffb51f7618 [ 138.152577][ T7315] [ 138.670124][ T7330] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 139.887557][ T7366] __nla_validate_parse: 2 callbacks suppressed [ 139.887572][ T7366] netlink: 132 bytes leftover after parsing attributes in process `syz.3.601'. [ 139.938366][ T7368] validate_nla: 12 callbacks suppressed [ 139.938381][ T7368] netlink: 'syz.0.603': attribute type 39 has an invalid length. [ 139.963203][ T7365] netlink: 'syz.2.602': attribute type 10 has an invalid length. [ 140.016714][ T7365] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 140.187969][ T7374] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.604'. [ 140.241122][ T7374] netlink: 'syz.1.604': attribute type 22 has an invalid length. [ 140.271824][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 140.571825][ T7381] FAULT_INJECTION: forcing a failure. [ 140.571825][ T7381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.595957][ T7381] CPU: 0 PID: 7381 Comm: syz.0.606 Not tainted 6.6.102-syzkaller #0 [ 140.604008][ T7381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.614157][ T7381] Call Trace: [ 140.617459][ T7381] [ 140.620409][ T7381] dump_stack_lvl+0x16c/0x230 [ 140.625126][ T7381] ? show_regs_print_info+0x20/0x20 [ 140.630357][ T7381] ? load_image+0x3b0/0x3b0 [ 140.634990][ T7381] ? __might_fault+0xaa/0x120 [ 140.639696][ T7381] ? __lock_acquire+0x7c80/0x7c80 [ 140.644838][ T7381] ? __virt_addr_valid+0x18c/0x540 [ 140.650006][ T7381] should_fail_ex+0x39d/0x4d0 [ 140.654752][ T7381] _copy_from_user+0x2f/0xe0 [ 140.659374][ T7381] bpf_prog_test_run_skb+0x259/0x11c0 [ 140.664861][ T7381] ? __fget_files+0x28/0x4d0 [ 140.669482][ T7381] ? __fget_files+0x44a/0x4d0 [ 140.674211][ T7381] ? cpu_online+0x60/0x60 [ 140.678590][ T7381] bpf_prog_test_run+0x321/0x390 [ 140.683541][ T7381] __sys_bpf+0x440/0x800 [ 140.687788][ T7381] ? bpf_link_show_fdinfo+0x350/0x350 [ 140.693257][ T7381] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 140.699601][ T7381] __x64_sys_bpf+0x7c/0x90 [ 140.704216][ T7381] do_syscall_64+0x55/0xb0 [ 140.708634][ T7381] ? clear_bhb_loop+0x40/0x90 [ 140.713415][ T7381] ? clear_bhb_loop+0x40/0x90 [ 140.718277][ T7381] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.724258][ T7381] RIP: 0033:0x7f221078ebe9 [ 140.728682][ T7381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.748557][ T7381] RSP: 002b:00007f2211573038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 140.757240][ T7381] RAX: ffffffffffffffda RBX: 00007f22109b5fa0 RCX: 00007f221078ebe9 [ 140.765390][ T7381] RDX: 0000000000000050 RSI: 0000200000001a00 RDI: 000000000000000a [ 140.773459][ T7381] RBP: 00007f2211573090 R08: 0000000000000000 R09: 0000000000000000 [ 140.781805][ T7381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.789905][ T7381] R13: 00007f22109b6038 R14: 00007f22109b5fa0 R15: 00007fffb51f7618 [ 140.798282][ T7381] [ 141.606646][ T7406] netlink: 'syz.1.614': attribute type 29 has an invalid length. [ 141.637000][ T7406] netlink: 'syz.1.614': attribute type 29 has an invalid length. [ 141.689216][ T7409] netlink: 'syz.1.614': attribute type 29 has an invalid length. [ 141.743370][ T7406] netlink: 'syz.1.614': attribute type 29 has an invalid length. [ 141.844961][ T7406] netlink: 'syz.1.614': attribute type 29 has an invalid length. [ 142.158748][ T7427] FAULT_INJECTION: forcing a failure. [ 142.158748][ T7427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.199238][ T7427] CPU: 0 PID: 7427 Comm: syz.2.624 Not tainted 6.6.102-syzkaller #0 [ 142.207281][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 142.217442][ T7427] Call Trace: [ 142.220736][ T7427] [ 142.223676][ T7427] dump_stack_lvl+0x16c/0x230 [ 142.228461][ T7427] ? show_regs_print_info+0x20/0x20 [ 142.233991][ T7427] ? load_image+0x3b0/0x3b0 [ 142.238515][ T7427] ? __lock_acquire+0x7c80/0x7c80 [ 142.243569][ T7427] ? __virt_addr_valid+0x18c/0x540 [ 142.248694][ T7427] should_fail_ex+0x39d/0x4d0 [ 142.253381][ T7427] _copy_from_user+0x2f/0xe0 [ 142.257968][ T7427] map_update_elem+0x4e8/0x700 [ 142.262817][ T7427] __sys_bpf+0x652/0x800 [ 142.267451][ T7427] ? bpf_link_show_fdinfo+0x350/0x350 [ 142.273031][ T7427] ? lock_chain_count+0x20/0x20 [ 142.277902][ T7427] __x64_sys_bpf+0x7c/0x90 [ 142.282429][ T7427] do_syscall_64+0x55/0xb0 [ 142.286950][ T7427] ? clear_bhb_loop+0x40/0x90 [ 142.291681][ T7427] ? clear_bhb_loop+0x40/0x90 [ 142.296382][ T7427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.302462][ T7427] RIP: 0033:0x7fae9b78ebe9 [ 142.306966][ T7427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.326607][ T7427] RSP: 002b:00007fae9c576038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.335382][ T7427] RAX: ffffffffffffffda RBX: 00007fae9b9b5fa0 RCX: 00007fae9b78ebe9 [ 142.343370][ T7427] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000002 [ 142.351519][ T7427] RBP: 00007fae9c576090 R08: 0000000000000000 R09: 0000000000000000 [ 142.359753][ T7427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.367889][ T7427] R13: 00007fae9b9b6038 R14: 00007fae9b9b5fa0 R15: 00007ffe4f2a36c8 [ 142.376226][ T7427] [ 142.443880][ T7431] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.622'. [ 142.788544][ T7441] netlink: 'syz.1.627': attribute type 2 has an invalid length. [ 142.844306][ T7441] netlink: 'syz.1.627': attribute type 2 has an invalid length. [ 144.117780][ T7468] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.637'. [ 145.501216][ T7498] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.648'. [ 146.703590][ T7522] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.658'. [ 147.276895][ T7537] netlink: 76 bytes leftover after parsing attributes in process `syz.0.662'. [ 147.497860][ T7537] syz.0.662[7537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.498138][ T7537] syz.0.662[7537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.822931][ T7549] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.667'. [ 148.180726][ T7560] FAULT_INJECTION: forcing a failure. [ 148.180726][ T7560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.202251][ T7560] CPU: 1 PID: 7560 Comm: syz.0.672 Not tainted 6.6.102-syzkaller #0 [ 148.210396][ T7560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.220542][ T7560] Call Trace: [ 148.223823][ T7560] [ 148.226756][ T7560] dump_stack_lvl+0x16c/0x230 [ 148.231449][ T7560] ? show_regs_print_info+0x20/0x20 [ 148.236652][ T7560] ? load_image+0x3b0/0x3b0 [ 148.241209][ T7560] ? __lock_acquire+0x7c80/0x7c80 [ 148.246246][ T7560] ? snprintf+0xdb/0x120 [ 148.250590][ T7560] should_fail_ex+0x39d/0x4d0 [ 148.255380][ T7560] _copy_to_user+0x2f/0xa0 [ 148.259894][ T7560] simple_read_from_buffer+0xe7/0x150 [ 148.265465][ T7560] proc_fail_nth_read+0x1e3/0x250 [ 148.270507][ T7560] ? proc_fault_inject_write+0x340/0x340 [ 148.276242][ T7560] ? fsnotify_perm+0x271/0x5e0 [ 148.281112][ T7560] ? proc_fault_inject_write+0x340/0x340 [ 148.286966][ T7560] vfs_read+0x27e/0x920 [ 148.291144][ T7560] ? kernel_read+0x1e0/0x1e0 [ 148.295740][ T7560] ? __fget_files+0x28/0x4d0 [ 148.300337][ T7560] ? __fget_files+0x44a/0x4d0 [ 148.305036][ T7560] ? __fdget_pos+0x2a3/0x330 [ 148.309637][ T7560] ? ksys_read+0x75/0x250 [ 148.314073][ T7560] ksys_read+0x147/0x250 [ 148.318409][ T7560] ? vfs_write+0x940/0x940 [ 148.322888][ T7560] ? lockdep_hardirqs_on+0x98/0x150 [ 148.328101][ T7560] do_syscall_64+0x55/0xb0 [ 148.332519][ T7560] ? clear_bhb_loop+0x40/0x90 [ 148.337194][ T7560] ? clear_bhb_loop+0x40/0x90 [ 148.341888][ T7560] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.347790][ T7560] RIP: 0033:0x7f221078d5fc [ 148.352206][ T7560] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 148.371972][ T7560] RSP: 002b:00007f2211573030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 148.380479][ T7560] RAX: ffffffffffffffda RBX: 00007f22109b5fa0 RCX: 00007f221078d5fc [ 148.388450][ T7560] RDX: 000000000000000f RSI: 00007f22115730a0 RDI: 0000000000000005 [ 148.396424][ T7560] RBP: 00007f2211573090 R08: 0000000000000000 R09: 0000000000000000 [ 148.404394][ T7560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.412416][ T7560] R13: 00007f22109b6038 R14: 00007f22109b5fa0 R15: 00007fffb51f7618 [ 148.420497][ T7560] [ 148.693767][ T7571] netlink: 'syz.1.677': attribute type 2 has an invalid length. [ 148.708678][ T7571] netlink: 164 bytes leftover after parsing attributes in process `syz.1.677'. [ 148.855942][ T7574] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.678'. [ 150.090164][ T7604] syzkaller0: entered promiscuous mode [ 150.096244][ T7604] syzkaller0: entered allmulticast mode [ 150.113348][ T7606] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.692'. [ 151.904635][ T7616] netlink: 'syz.2.695': attribute type 28 has an invalid length. [ 152.009891][ T7631] netlink: 2 bytes leftover after parsing attributes in process `syz.0.699'. [ 152.026360][ T7631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.065200][ T7631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.088384][ T7631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.166991][ T7631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.177203][ T7631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.188672][ T7631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.199774][ T7631] batadv_slave_1: entered promiscuous mode [ 153.021445][ T7637] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.701'. [ 154.835084][ T7701] netlink: 'syz.0.728': attribute type 4 has an invalid length. [ 154.843829][ T7701] netlink: 152 bytes leftover after parsing attributes in process `syz.0.728'. [ 154.868115][ T7701] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 155.580215][ T7726] FAULT_INJECTION: forcing a failure. [ 155.580215][ T7726] name failslab, interval 1, probability 0, space 0, times 0 [ 155.604863][ T7726] CPU: 1 PID: 7726 Comm: syz.2.736 Not tainted 6.6.102-syzkaller #0 [ 155.613003][ T7726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.623173][ T7726] Call Trace: [ 155.626469][ T7726] [ 155.629417][ T7726] dump_stack_lvl+0x16c/0x230 [ 155.634140][ T7726] ? show_regs_print_info+0x20/0x20 [ 155.639457][ T7726] ? load_image+0x3b0/0x3b0 [ 155.644285][ T7726] ? __lock_acquire+0x7c80/0x7c80 [ 155.649439][ T7726] should_fail_ex+0x39d/0x4d0 [ 155.654341][ T7726] should_failslab+0x9/0x20 [ 155.658967][ T7726] slab_pre_alloc_hook+0x59/0x310 [ 155.664035][ T7726] ? bpf_test_init+0xc0/0x150 [ 155.668979][ T7726] ? bpf_test_init+0xc0/0x150 [ 155.673745][ T7726] __kmem_cache_alloc_node+0x53/0x260 [ 155.679205][ T7726] ? bpf_test_init+0xc0/0x150 [ 155.683880][ T7726] __kmalloc+0xa4/0x240 [ 155.688045][ T7726] bpf_test_init+0xc0/0x150 [ 155.692564][ T7726] bpf_prog_test_run_xdp+0x382/0xfa0 [ 155.697878][ T7726] ? dev_put+0x80/0x80 [ 155.701964][ T7726] ? dev_put+0x80/0x80 [ 155.706223][ T7726] bpf_prog_test_run+0x321/0x390 [ 155.711270][ T7726] __sys_bpf+0x440/0x800 [ 155.715601][ T7726] ? bpf_link_show_fdinfo+0x350/0x350 [ 155.720983][ T7726] ? lock_chain_count+0x20/0x20 [ 155.725899][ T7726] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 155.731913][ T7726] __x64_sys_bpf+0x7c/0x90 [ 155.736337][ T7726] do_syscall_64+0x55/0xb0 [ 155.740758][ T7726] ? clear_bhb_loop+0x40/0x90 [ 155.745511][ T7726] ? clear_bhb_loop+0x40/0x90 [ 155.750189][ T7726] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.756075][ T7726] RIP: 0033:0x7fae9b78ebe9 [ 155.760487][ T7726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.780351][ T7726] RSP: 002b:00007fae9c576038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.788854][ T7726] RAX: ffffffffffffffda RBX: 00007fae9b9b5fa0 RCX: 00007fae9b78ebe9 [ 155.796822][ T7726] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 155.804873][ T7726] RBP: 00007fae9c576090 R08: 0000000000000000 R09: 0000000000000000 [ 155.812839][ T7726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.820802][ T7726] R13: 00007fae9b9b6038 R14: 00007fae9b9b5fa0 R15: 00007ffe4f2a36c8 [ 155.828792][ T7726] [ 156.090053][ T7736] FAULT_INJECTION: forcing a failure. [ 156.090053][ T7736] name failslab, interval 1, probability 0, space 0, times 0 [ 156.112349][ T7736] CPU: 0 PID: 7736 Comm: syz.2.740 Not tainted 6.6.102-syzkaller #0 [ 156.120485][ T7736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 156.131175][ T7736] Call Trace: [ 156.134615][ T7736] [ 156.137582][ T7736] dump_stack_lvl+0x16c/0x230 [ 156.142295][ T7736] ? show_regs_print_info+0x20/0x20 [ 156.147539][ T7736] ? load_image+0x3b0/0x3b0 [ 156.152078][ T7736] ? verify_lock_unused+0x140/0x140 [ 156.157397][ T7736] should_fail_ex+0x39d/0x4d0 [ 156.162116][ T7736] should_failslab+0x9/0x20 [ 156.166652][ T7736] slab_pre_alloc_hook+0x59/0x310 [ 156.171715][ T7736] kmem_cache_alloc+0x5a/0x2e0 [ 156.176606][ T7736] ? skb_clone+0x1eb/0x370 [ 156.181135][ T7736] skb_clone+0x1eb/0x370 [ 156.185659][ T7736] __netlink_deliver_tap+0x41c/0x830 [ 156.190948][ T7736] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.196148][ T7736] netlink_deliver_tap+0x19c/0x1b0 [ 156.201268][ T7736] netlink_unicast+0x72c/0x8d0 [ 156.206055][ T7736] netlink_sendmsg+0x8c1/0xbe0 [ 156.210825][ T7736] ? netlink_getsockopt+0x580/0x580 [ 156.216020][ T7736] ? aa_sock_msg_perm+0x94/0x150 [ 156.220967][ T7736] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 156.226514][ T7736] ? security_socket_sendmsg+0x80/0xa0 [ 156.231988][ T7736] ? netlink_getsockopt+0x580/0x580 [ 156.237275][ T7736] ____sys_sendmsg+0x5bf/0x950 [ 156.242046][ T7736] ? __asan_memset+0x22/0x40 [ 156.246662][ T7736] ? __sys_sendmsg_sock+0x30/0x30 [ 156.251771][ T7736] ? __import_iovec+0x5f2/0x860 [ 156.256621][ T7736] ? import_iovec+0x73/0xa0 [ 156.261314][ T7736] ___sys_sendmsg+0x220/0x290 [ 156.266094][ T7736] ? __sys_sendmsg+0x270/0x270 [ 156.271041][ T7736] ? __lock_acquire+0x7c80/0x7c80 [ 156.276256][ T7736] __se_sys_sendmsg+0x1a5/0x270 [ 156.281127][ T7736] ? __x64_sys_sendmsg+0x80/0x80 [ 156.286086][ T7736] ? lockdep_hardirqs_on+0x98/0x150 [ 156.291310][ T7736] do_syscall_64+0x55/0xb0 [ 156.295742][ T7736] ? clear_bhb_loop+0x40/0x90 [ 156.300429][ T7736] ? clear_bhb_loop+0x40/0x90 [ 156.305152][ T7736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.311054][ T7736] RIP: 0033:0x7fae9b78ebe9 [ 156.315491][ T7736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.335386][ T7736] RSP: 002b:00007fae9c576038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.343880][ T7736] RAX: ffffffffffffffda RBX: 00007fae9b9b5fa0 RCX: 00007fae9b78ebe9 [ 156.351888][ T7736] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 156.360060][ T7736] RBP: 00007fae9c576090 R08: 0000000000000000 R09: 0000000000000000 [ 156.368050][ T7736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.376048][ T7736] R13: 00007fae9b9b6038 R14: 00007fae9b9b5fa0 R15: 00007ffe4f2a36c8 [ 156.384146][ T7736] [ 156.651860][ T7743] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.742'. [ 157.162321][ T7768] netlink: 60 bytes leftover after parsing attributes in process `syz.2.750'. [ 157.184182][ T7765] netlink: 12751 bytes leftover after parsing attributes in process `syz.3.752'. [ 157.196102][ T7768] netlink: 60 bytes leftover after parsing attributes in process `syz.2.750'. [ 157.297309][ T7763] netlink: 60 bytes leftover after parsing attributes in process `syz.2.750'. [ 157.398381][ T7776] netlink: 'syz.3.753': attribute type 13 has an invalid length. [ 157.410862][ T7776] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.753'. [ 157.739599][ T7782] netlink: 'syz.1.756': attribute type 5 has an invalid length. [ 157.759880][ T7782] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.756'. [ 157.792618][ T7782] netlink: 3787 bytes leftover after parsing attributes in process `syz.1.756'. [ 158.807883][ T7803] netlink: 'syz.2.764': attribute type 10 has an invalid length. [ 158.900471][ T7803] bond0: (slave bond_slave_0): Releasing backup interface [ 159.209276][ T7803] syz.2.764 (7803) used greatest stack depth: 19272 bytes left [ 159.860786][ T7821] netlink: 14457 bytes leftover after parsing attributes in process `syz.1.771'. [ 160.168567][ T7835] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.777'. [ 160.224647][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 160.339659][ T7841] FAULT_INJECTION: forcing a failure. [ 160.339659][ T7841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.357733][ T7841] CPU: 0 PID: 7841 Comm: syz.1.780 Not tainted 6.6.102-syzkaller #0 [ 160.365780][ T7841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.375850][ T7841] Call Trace: [ 160.379124][ T7841] [ 160.382063][ T7841] dump_stack_lvl+0x16c/0x230 [ 160.386915][ T7841] ? show_regs_print_info+0x20/0x20 [ 160.392105][ T7841] ? load_image+0x3b0/0x3b0 [ 160.396690][ T7841] ? __might_fault+0xaa/0x120 [ 160.401824][ T7841] ? __lock_acquire+0x7c80/0x7c80 [ 160.407017][ T7841] ? __virt_addr_valid+0x18c/0x540 [ 160.412125][ T7841] should_fail_ex+0x39d/0x4d0 [ 160.416799][ T7841] _copy_from_user+0x2f/0xe0 [ 160.421380][ T7841] bpf_prog_test_run_skb+0x259/0x11c0 [ 160.426760][ T7841] ? __fget_files+0x28/0x4d0 [ 160.431389][ T7841] ? __fget_files+0x44a/0x4d0 [ 160.436170][ T7841] ? cpu_online+0x60/0x60 [ 160.440584][ T7841] bpf_prog_test_run+0x321/0x390 [ 160.445515][ T7841] __sys_bpf+0x440/0x800 [ 160.449837][ T7841] ? bpf_link_show_fdinfo+0x350/0x350 [ 160.455380][ T7841] ? lock_chain_count+0x20/0x20 [ 160.460227][ T7841] __x64_sys_bpf+0x7c/0x90 [ 160.464812][ T7841] do_syscall_64+0x55/0xb0 [ 160.469234][ T7841] ? clear_bhb_loop+0x40/0x90 [ 160.473921][ T7841] ? clear_bhb_loop+0x40/0x90 [ 160.478884][ T7841] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.485059][ T7841] RIP: 0033:0x7f3a1838ebe9 [ 160.489568][ T7841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.509667][ T7841] RSP: 002b:00007f3a191ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 160.518131][ T7841] RAX: ffffffffffffffda RBX: 00007f3a185b5fa0 RCX: 00007f3a1838ebe9 [ 160.526145][ T7841] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 160.534221][ T7841] RBP: 00007f3a191ac090 R08: 0000000000000000 R09: 0000000000000000 [ 160.542204][ T7841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.550194][ T7841] R13: 00007f3a185b6038 R14: 00007f3a185b5fa0 R15: 00007ffc15953248 [ 160.558176][ T7841] [ 162.826956][ T7890] pim6reg1: entered allmulticast mode [ 163.277733][ T7901] netlink: 'syz.0.803': attribute type 13 has an invalid length. [ 163.289807][ T7901] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.803'. [ 165.206565][ T7941] netlink: 60 bytes leftover after parsing attributes in process `syz.0.819'. [ 165.246023][ T7942] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.817'. [ 165.281799][ T7942] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 165.298639][ T7945] netlink: 'syz.1.820': attribute type 10 has an invalid length. [ 165.314384][ T7945] veth1_vlan: entered allmulticast mode [ 165.357700][ T7945] team0: Device veth1_vlan failed to register rx_handler [ 165.431885][ T7949] netlink: 'syz.3.821': attribute type 13 has an invalid length. [ 166.177919][ T7970] netlink: 182056 bytes leftover after parsing attributes in process `syz.1.831'. [ 166.203750][ T7970] openvswitch: netlink: Key type 4112 is out of range max 32 [ 166.268591][ T7968] FAULT_INJECTION: forcing a failure. [ 166.268591][ T7968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.313514][ T7968] CPU: 1 PID: 7968 Comm: syz.2.830 Not tainted 6.6.102-syzkaller #0 [ 166.321573][ T7968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 166.331747][ T7968] Call Trace: [ 166.335046][ T7968] [ 166.338036][ T7968] dump_stack_lvl+0x16c/0x230 [ 166.342758][ T7968] ? show_regs_print_info+0x20/0x20 [ 166.347974][ T7968] ? load_image+0x3b0/0x3b0 [ 166.352494][ T7968] ? __might_fault+0xaa/0x120 [ 166.357200][ T7968] ? __lock_acquire+0x7c80/0x7c80 [ 166.362512][ T7968] should_fail_ex+0x39d/0x4d0 [ 166.367396][ T7968] _copy_to_user+0x2f/0xa0 [ 166.372011][ T7968] bpf_test_finish+0x24b/0x620 [ 166.376932][ T7968] ? convert___skb_to_skb+0x590/0x590 [ 166.382467][ T7968] ? convert_skb_to___skb+0x420/0x420 [ 166.387892][ T7968] bpf_prog_test_run_skb+0xc28/0x11c0 [ 166.393317][ T7968] ? cpu_online+0x60/0x60 [ 166.397862][ T7968] bpf_prog_test_run+0x321/0x390 [ 166.402835][ T7968] __sys_bpf+0x440/0x800 [ 166.407123][ T7968] ? bpf_link_show_fdinfo+0x350/0x350 [ 166.412550][ T7968] ? lock_chain_count+0x20/0x20 [ 166.417535][ T7968] __x64_sys_bpf+0x7c/0x90 [ 166.422027][ T7968] do_syscall_64+0x55/0xb0 [ 166.426466][ T7968] ? clear_bhb_loop+0x40/0x90 [ 166.431165][ T7968] ? clear_bhb_loop+0x40/0x90 [ 166.435863][ T7968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.441925][ T7968] RIP: 0033:0x7fae9b78ebe9 [ 166.446387][ T7968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.466194][ T7968] RSP: 002b:00007fae9c576038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 166.474820][ T7968] RAX: ffffffffffffffda RBX: 00007fae9b9b5fa0 RCX: 00007fae9b78ebe9 [ 166.482991][ T7968] RDX: 000000000000004c RSI: 0000200000000680 RDI: 000000000000000a [ 166.490992][ T7968] RBP: 00007fae9c576090 R08: 0000000000000000 R09: 0000000000000000 [ 166.499272][ T7968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.507349][ T7968] R13: 00007fae9b9b6038 R14: 00007fae9b9b5fa0 R15: 00007ffe4f2a36c8 [ 166.515425][ T7968] [ 166.879309][ T7995] netlink: 5 bytes leftover after parsing attributes in process `syz.2.839'. [ 166.898482][ T7995] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.839'. [ 167.714595][ T8005] FAULT_INJECTION: forcing a failure. [ 167.714595][ T8005] name failslab, interval 1, probability 0, space 0, times 0 [ 167.731596][ T8005] CPU: 1 PID: 8005 Comm: syz.1.842 Not tainted 6.6.102-syzkaller #0 [ 167.739634][ T8005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 167.749797][ T8005] Call Trace: [ 167.753090][ T8005] [ 167.756089][ T8005] dump_stack_lvl+0x16c/0x230 [ 167.760808][ T8005] ? show_regs_print_info+0x20/0x20 [ 167.766037][ T8005] ? load_image+0x3b0/0x3b0 [ 167.770582][ T8005] should_fail_ex+0x39d/0x4d0 [ 167.775284][ T8005] should_failslab+0x9/0x20 [ 167.779804][ T8005] slab_pre_alloc_hook+0x59/0x310 [ 167.784848][ T8005] ? proc_thread_self_get_link+0xfc/0x190 [ 167.790701][ T8005] __kmem_cache_alloc_node+0x53/0x260 [ 167.796108][ T8005] ? proc_thread_self_get_link+0xfc/0x190 [ 167.801898][ T8005] kmalloc_trace+0x2a/0xe0 [ 167.806450][ T8005] proc_thread_self_get_link+0xfc/0x190 [ 167.812026][ T8005] ? proc_setup_thread_self+0x2d0/0x2d0 [ 167.817591][ T8005] pick_link+0x6a8/0xdd0 [ 167.821863][ T8005] step_into+0xc3d/0xf10 [ 167.826134][ T8005] ? __d_lookup_rcu+0x43e/0x4c0 [ 167.831007][ T8005] ? set_root+0x3a0/0x3a0 [ 167.835355][ T8005] ? lookup_fast+0x15b/0x4d0 [ 167.839989][ T8005] ? security_inode_permission+0xb0/0xf0 [ 167.845639][ T8005] link_path_walk+0x6df/0xe00 [ 167.850436][ T8005] ? handle_lookup_down+0x130/0x130 [ 167.855661][ T8005] path_openat+0x283/0x3190 [ 167.860382][ T8005] ? __kasan_slab_alloc+0x6c/0x80 [ 167.865691][ T8005] ? __x64_sys_openat+0x139/0x160 [ 167.870924][ T8005] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.877111][ T8005] ? verify_lock_unused+0x140/0x140 [ 167.882433][ T8005] ? do_filp_open+0x3d0/0x3d0 [ 167.887154][ T8005] ? __virt_addr_valid+0x18c/0x540 [ 167.892342][ T8005] do_filp_open+0x1c5/0x3d0 [ 167.896878][ T8005] ? vfs_tmpfile+0x490/0x490 [ 167.901507][ T8005] ? _raw_spin_unlock+0x28/0x40 [ 167.906470][ T8005] ? alloc_fd+0x58f/0x630 [ 167.910942][ T8005] do_sys_openat2+0x12c/0x1c0 [ 167.915651][ T8005] ? do_sys_open+0xe0/0xe0 [ 167.920099][ T8005] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 167.926203][ T8005] ? lock_chain_count+0x20/0x20 [ 167.931176][ T8005] __x64_sys_openat+0x139/0x160 [ 167.936053][ T8005] do_syscall_64+0x55/0xb0 [ 167.940504][ T8005] ? clear_bhb_loop+0x40/0x90 [ 167.945403][ T8005] ? clear_bhb_loop+0x40/0x90 [ 167.950301][ T8005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.956388][ T8005] RIP: 0033:0x7f3a1838d550 [ 167.961290][ T8005] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 167.981375][ T8005] RSP: 002b:00007f3a1918af10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 167.990005][ T8005] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f3a1838d550 [ 167.998075][ T8005] RDX: 0000000000000002 RSI: 00007f3a1918afa0 RDI: 00000000ffffff9c [ 168.006114][ T8005] RBP: 00007f3a1918afa0 R08: 0000000000000000 R09: 0000000000000000 [ 168.014279][ T8005] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 168.022409][ T8005] R13: 00007f3a185b6128 R14: 00007f3a185b6090 R15: 00007ffc15953248 [ 168.030506][ T8005] [ 168.683961][ T8012] netlink: 'syz.0.845': attribute type 10 has an invalid length. [ 168.831818][ T8012] bond0: (slave bond_slave_0): Releasing backup interface [ 169.162184][ T48] wlan1: Trigger new scan to find an IBSS to join [ 169.427763][ T8012] syz.0.845 (8012) used greatest stack depth: 19016 bytes left [ 169.449033][ T8028] netlink: 'syz.3.850': attribute type 6 has an invalid length. [ 169.458077][ T8028] : renamed from team_slave_1 (while UP) [ 169.532559][ T8031] netlink: 5 bytes leftover after parsing attributes in process `syz.2.851'. [ 169.585819][ T8031] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.851'. [ 169.719685][ T8036] FAULT_INJECTION: forcing a failure. [ 169.719685][ T8036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.753384][ T8036] CPU: 0 PID: 8036 Comm: syz.3.854 Not tainted 6.6.102-syzkaller #0 [ 169.761517][ T8036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.771782][ T8036] Call Trace: [ 169.775116][ T8036] [ 169.778062][ T8036] dump_stack_lvl+0x16c/0x230 [ 169.782790][ T8036] ? show_regs_print_info+0x20/0x20 [ 169.788028][ T8036] ? load_image+0x3b0/0x3b0 [ 169.792576][ T8036] ? __might_fault+0xaa/0x120 [ 169.797275][ T8036] ? __lock_acquire+0x7c80/0x7c80 [ 169.802328][ T8036] ? __lock_acquire+0x1334/0x7c80 [ 169.807734][ T8036] ? kernel_text_address+0xa0/0xd0 [ 169.813012][ T8036] should_fail_ex+0x39d/0x4d0 [ 169.817992][ T8036] _copy_from_user+0x2f/0xe0 [ 169.822628][ T8036] ethtool_set_per_queue+0xba/0x1c0 [ 169.828017][ T8036] ? ethtool_get_phy_stats+0x520/0x520 [ 169.833652][ T8036] ? __might_fault+0xaa/0x120 [ 169.838450][ T8036] ? __lock_acquire+0x7c80/0x7c80 [ 169.843507][ T8036] ? __might_fault+0xaa/0x120 [ 169.848226][ T8036] ? __might_fault+0xc6/0x120 [ 169.853106][ T8036] ? __might_fault+0xaa/0x120 [ 169.857921][ T8036] dev_ethtool+0x15d8/0x1720 [ 169.862633][ T8036] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 169.869005][ T8036] ? __lock_acquire+0x7c80/0x7c80 [ 169.874163][ T8036] ? __might_fault+0xaa/0x120 [ 169.878949][ T8036] ? full_name_hash+0x92/0xe0 [ 169.883673][ T8036] ? dev_load+0x21/0x1f0 [ 169.887963][ T8036] dev_ioctl+0x4ca/0x1170 [ 169.892864][ T8036] sock_do_ioctl+0x226/0x2f0 [ 169.897507][ T8036] ? sock_show_fdinfo+0xb0/0xb0 [ 169.902415][ T8036] sock_ioctl+0x623/0x7a0 [ 169.906788][ T8036] ? sock_poll+0x3d0/0x3d0 [ 169.911429][ T8036] ? bpf_lsm_file_ioctl+0x9/0x10 [ 169.916400][ T8036] ? security_file_ioctl+0x80/0xa0 [ 169.921547][ T8036] ? sock_poll+0x3d0/0x3d0 [ 169.926001][ T8036] __se_sys_ioctl+0xfd/0x170 [ 169.930616][ T8036] do_syscall_64+0x55/0xb0 [ 169.935065][ T8036] ? clear_bhb_loop+0x40/0x90 [ 169.939791][ T8036] ? clear_bhb_loop+0x40/0x90 [ 169.944504][ T8036] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.950696][ T8036] RIP: 0033:0x7f218638ebe9 [ 169.955836][ T8036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.975733][ T8036] RSP: 002b:00007f218711a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.984290][ T8036] RAX: ffffffffffffffda RBX: 00007f21865b5fa0 RCX: 00007f218638ebe9 [ 169.992297][ T8036] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000014 [ 170.000400][ T8036] RBP: 00007f218711a090 R08: 0000000000000000 R09: 0000000000000000 [ 170.008906][ T8036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.017021][ T8036] R13: 00007f21865b6038 R14: 00007f21865b5fa0 R15: 00007fffedf84678 [ 170.025045][ T8036] [ 171.313797][ T8066] netlink: 5 bytes leftover after parsing attributes in process `syz.2.864'. [ 171.434300][ T8066] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.864'. [ 171.727165][ T8073] sctp: [Deprecated]: syz.0.865 (pid 8073) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.727165][ T8073] Use struct sctp_sack_info instead [ 172.346447][ T8092] netlink: 60 bytes leftover after parsing attributes in process `syz.2.873'. [ 172.366252][ T8092] netlink: 60 bytes leftover after parsing attributes in process `syz.2.873'. [ 172.386568][ T8089] netlink: 60 bytes leftover after parsing attributes in process `syz.2.873'. [ 172.407278][ T8092] netlink: 60 bytes leftover after parsing attributes in process `syz.2.873'. [ 172.727591][ T8101] netlink: 5 bytes leftover after parsing attributes in process `syz.3.877'. [ 172.762846][ T8101] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.877'. [ 172.893096][ T8107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.900800][ T8107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.969806][ T8108] netlink: 'syz.1.880': attribute type 4 has an invalid length. [ 173.025034][ T8107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.048614][ T8107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.201544][ T1132] wlan1: Trigger new scan to find an IBSS to join [ 174.269908][ T8131] FAULT_INJECTION: forcing a failure. [ 174.269908][ T8131] name failslab, interval 1, probability 0, space 0, times 0 [ 174.292190][ T8130] netlink: 'syz.0.885': attribute type 9 has an invalid length. [ 174.330431][ T8131] CPU: 1 PID: 8131 Comm: syz.1.886 Not tainted 6.6.102-syzkaller #0 [ 174.338657][ T8131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 174.348751][ T8131] Call Trace: [ 174.352062][ T8131] [ 174.355176][ T8131] dump_stack_lvl+0x16c/0x230 [ 174.359881][ T8131] ? show_regs_print_info+0x20/0x20 [ 174.366684][ T8131] ? load_image+0x3b0/0x3b0 [ 174.371240][ T8131] ? __lock_acquire+0x7c80/0x7c80 [ 174.376478][ T8131] should_fail_ex+0x39d/0x4d0 [ 174.381386][ T8131] should_failslab+0x9/0x20 [ 174.385936][ T8131] slab_pre_alloc_hook+0x59/0x310 [ 174.391089][ T8131] ? sk_prot_alloc+0xe7/0x210 [ 174.396279][ T8131] ? sk_prot_alloc+0xe7/0x210 [ 174.401158][ T8131] __kmem_cache_alloc_node+0x53/0x260 [ 174.406693][ T8131] ? sk_prot_alloc+0xe7/0x210 [ 174.411414][ T8131] __kmalloc+0xa4/0x240 [ 174.415893][ T8131] sk_prot_alloc+0xe7/0x210 [ 174.420515][ T8131] ? sk_alloc+0x24/0x360 [ 174.424970][ T8131] sk_alloc+0x3a/0x360 [ 174.429169][ T8131] ? bpf_ctx_init+0x163/0x1a0 [ 174.434169][ T8131] ? bpf_prog_test_run_skb+0x268/0x11c0 [ 174.439947][ T8131] bpf_prog_test_run_skb+0x39a/0x11c0 [ 174.445397][ T8131] ? __fget_files+0x28/0x4d0 [ 174.450040][ T8131] ? cpu_online+0x60/0x60 [ 174.454577][ T8131] bpf_prog_test_run+0x321/0x390 [ 174.459639][ T8131] __sys_bpf+0x440/0x800 [ 174.464004][ T8131] ? bpf_link_show_fdinfo+0x350/0x350 [ 174.469529][ T8131] ? lock_chain_count+0x20/0x20 [ 174.474431][ T8131] __x64_sys_bpf+0x7c/0x90 [ 174.479050][ T8131] do_syscall_64+0x55/0xb0 [ 174.483577][ T8131] ? clear_bhb_loop+0x40/0x90 [ 174.488397][ T8131] ? clear_bhb_loop+0x40/0x90 [ 174.493113][ T8131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.499055][ T8131] RIP: 0033:0x7f3a1838ebe9 [ 174.503499][ T8131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.523131][ T8131] RSP: 002b:00007f3a191ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 174.531669][ T8131] RAX: ffffffffffffffda RBX: 00007f3a185b5fa0 RCX: 00007f3a1838ebe9 [ 174.539812][ T8131] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 174.547813][ T8131] RBP: 00007f3a191ac090 R08: 0000000000000000 R09: 0000000000000000 [ 174.555813][ T8131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.564050][ T8131] R13: 00007f3a185b6038 R14: 00007f3a185b5fa0 R15: 00007ffc15953248 [ 174.572170][ T8131] [ 174.803586][ T8146] __nla_validate_parse: 2 callbacks suppressed [ 174.803603][ T8146] netlink: 5 bytes leftover after parsing attributes in process `syz.1.891'. [ 174.878077][ T8146] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.891'. [ 175.415889][ T3493] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 175.917274][ T8182] FAULT_INJECTION: forcing a failure. [ 175.917274][ T8182] name failslab, interval 1, probability 0, space 0, times 0 [ 175.948773][ T8182] CPU: 0 PID: 8182 Comm: syz.3.909 Not tainted 6.6.102-syzkaller #0 [ 175.957022][ T8182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.967134][ T8182] Call Trace: [ 175.970548][ T8182] [ 175.973514][ T8182] dump_stack_lvl+0x16c/0x230 [ 175.978411][ T8182] ? show_regs_print_info+0x20/0x20 [ 175.983646][ T8182] ? load_image+0x3b0/0x3b0 [ 175.988201][ T8182] ? __might_sleep+0xe0/0xe0 [ 175.992843][ T8182] ? __lock_acquire+0x7c80/0x7c80 [ 175.998024][ T8182] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 176.003973][ T8182] should_fail_ex+0x39d/0x4d0 [ 176.008805][ T8182] should_failslab+0x9/0x20 [ 176.013371][ T8182] slab_pre_alloc_hook+0x59/0x310 [ 176.018459][ T8182] ? rtnl_newlink+0xeb/0x2020 [ 176.023301][ T8182] __kmem_cache_alloc_node+0x53/0x260 [ 176.028731][ T8182] ? rtnl_newlink+0xeb/0x2020 [ 176.028773][ T8190] FAULT_INJECTION: forcing a failure. [ 176.028773][ T8190] name failslab, interval 1, probability 0, space 0, times 0 [ 176.033535][ T8182] kmalloc_trace+0x2a/0xe0 [ 176.033568][ T8182] rtnl_newlink+0xeb/0x2020 [ 176.033623][ T8182] ? perf_trace_contention_begin+0x9f/0x2f0 [ 176.061237][ T8182] ? __mutex_trylock_common+0x153/0x250 [ 176.066821][ T8182] ? rtnl_setlink+0x4b0/0x4b0 [ 176.071612][ T8182] ? trace_raw_output_contention_end+0xd0/0xd0 [ 176.078179][ T8182] ? rcu_is_watching+0x15/0xb0 [ 176.083048][ T8182] ? trace_contention_end+0x39/0xe0 [ 176.088291][ T8182] ? __mutex_lock+0x304/0xcc0 [ 176.092993][ T8182] ? rtnetlink_rcv_msg+0x76f/0xf10 [ 176.098145][ T8182] ? mutex_lock_nested+0x20/0x20 [ 176.103360][ T8182] ? rtnl_setlink+0x4b0/0x4b0 [ 176.108127][ T8182] rtnetlink_rcv_msg+0x7c7/0xf10 [ 176.113101][ T8182] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 176.118236][ T8182] ? rtnetlink_bind+0x80/0x80 [ 176.122937][ T8182] ? perf_tp_event+0x12d7/0x13a0 [ 176.127982][ T8182] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 176.133795][ T8182] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 176.139785][ T8182] ? __dev_queue_xmit+0x245/0x35a0 [ 176.144961][ T8182] ? __dev_queue_xmit+0x245/0x35a0 [ 176.150086][ T8182] ? __dev_queue_xmit+0x1449/0x35a0 [ 176.155312][ T8182] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 176.161072][ T8182] ? perf_trace_lock+0x2ed/0x380 [ 176.166197][ T8182] ? __copy_skb_header+0xa7/0x550 [ 176.171413][ T8182] netlink_rcv_skb+0x216/0x480 [ 176.176194][ T8182] ? rtnetlink_bind+0x80/0x80 [ 176.180894][ T8182] ? netlink_ack+0x1110/0x1110 [ 176.185704][ T8182] ? __lock_acquire+0x7c80/0x7c80 [ 176.190833][ T8182] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.196054][ T8182] netlink_unicast+0x751/0x8d0 [ 176.200852][ T8182] netlink_sendmsg+0x8c1/0xbe0 [ 176.205646][ T8182] ? netlink_getsockopt+0x580/0x580 [ 176.210879][ T8182] ? aa_sock_msg_perm+0x94/0x150 [ 176.215988][ T8182] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 176.221384][ T8182] ? security_socket_sendmsg+0x80/0xa0 [ 176.226966][ T8182] ? netlink_getsockopt+0x580/0x580 [ 176.232448][ T8182] ____sys_sendmsg+0x5bf/0x950 [ 176.237350][ T8182] ? __asan_memset+0x22/0x40 [ 176.241952][ T8182] ? __sys_sendmsg_sock+0x30/0x30 [ 176.246988][ T8182] ? __import_iovec+0x5f2/0x860 [ 176.251865][ T8182] ? import_iovec+0x73/0xa0 [ 176.256405][ T8182] ___sys_sendmsg+0x220/0x290 [ 176.261315][ T8182] ? __sys_sendmsg+0x270/0x270 [ 176.266216][ T8182] ? __lock_acquire+0x7c80/0x7c80 [ 176.271388][ T8182] __se_sys_sendmsg+0x1a5/0x270 [ 176.276262][ T8182] ? __x64_sys_sendmsg+0x80/0x80 [ 176.281324][ T8182] ? lockdep_hardirqs_on+0x98/0x150 [ 176.286730][ T8182] do_syscall_64+0x55/0xb0 [ 176.291234][ T8182] ? clear_bhb_loop+0x40/0x90 [ 176.295938][ T8182] ? clear_bhb_loop+0x40/0x90 [ 176.300640][ T8182] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.306638][ T8182] RIP: 0033:0x7f218638ebe9 [ 176.311059][ T8182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.330934][ T8182] RSP: 002b:00007f218711a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.339462][ T8182] RAX: ffffffffffffffda RBX: 00007f21865b5fa0 RCX: 00007f218638ebe9 [ 176.347443][ T8182] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000004 [ 176.355598][ T8182] RBP: 00007f218711a090 R08: 0000000000000000 R09: 0000000000000000 [ 176.363575][ T8182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.371568][ T8182] R13: 00007f21865b6038 R14: 00007f21865b5fa0 R15: 00007fffedf84678 [ 176.379681][ T8182] [ 176.382793][ T8190] CPU: 1 PID: 8190 Comm: syz.1.910 Not tainted 6.6.102-syzkaller #0 [ 176.390792][ T8190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.400940][ T8190] Call Trace: [ 176.404324][ T8190] [ 176.407270][ T8190] dump_stack_lvl+0x16c/0x230 [ 176.411947][ T8190] ? show_regs_print_info+0x20/0x20 [ 176.417142][ T8190] ? load_image+0x3b0/0x3b0 [ 176.421825][ T8190] should_fail_ex+0x39d/0x4d0 [ 176.426539][ T8190] should_failslab+0x9/0x20 [ 176.431131][ T8190] slab_pre_alloc_hook+0x59/0x310 [ 176.436261][ T8190] kmem_cache_alloc+0x5a/0x2e0 [ 176.441128][ T8190] ? dst_alloc+0x105/0x170 [ 176.445567][ T8190] dst_alloc+0x105/0x170 [ 176.449818][ T8190] ip_route_output_key_hash_rcu+0x1413/0x2320 [ 176.455973][ T8190] ? ip_route_input_rcu+0x1745/0x3010 [ 176.461501][ T8190] ? ip_route_output_key_hash+0x12f/0x340 [ 176.467221][ T8190] ip_route_output_key_hash+0x20b/0x340 [ 176.472849][ T8190] ? verify_lock_unused+0x140/0x140 [ 176.478042][ T8190] ? ip_route_input_rcu+0x3010/0x3010 [ 176.483419][ T8190] ? __asan_memset+0x22/0x40 [ 176.488091][ T8190] ip_route_output_flow+0x2a/0x150 [ 176.493205][ T8190] ip_tunnel_xmit+0x96c/0x2360 [ 176.497974][ T8190] ? ip_tunnel_xmit+0xf0/0x2360 [ 176.502917][ T8190] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 176.508284][ T8190] ? skb_network_protocol+0x509/0x760 [ 176.513749][ T8190] ? lockdep_hardirqs_on+0x98/0x150 [ 176.519116][ T8190] ? validate_xmit_xfrm+0xc1/0x12a0 [ 176.524587][ T8190] ? gre_build_header+0x25b/0x990 [ 176.529733][ T8190] ipgre_xmit+0x7a6/0xb20 [ 176.534143][ T8190] dev_hard_start_xmit+0x246/0x740 [ 176.539280][ T8190] __dev_queue_xmit+0x1a64/0x35a0 [ 176.544330][ T8190] ? __dev_queue_xmit+0x245/0x35a0 [ 176.549440][ T8190] ? __kmem_cache_alloc_node+0x13e/0x260 [ 176.555086][ T8190] ? netdev_core_pick_tx+0x340/0x340 [ 176.560366][ T8190] ? skb_release_data+0x1cf/0x800 [ 176.565417][ T8190] ? pskb_expand_head+0xbfe/0x1230 [ 176.570614][ T8190] ? __bpf_redirect+0x533/0xe60 [ 176.575463][ T8190] __bpf_tx_skb+0x189/0x250 [ 176.579994][ T8190] bpf_clone_redirect+0x270/0x3d0 [ 176.585044][ T8190] bpf_prog_208b094576c80b22+0x5e/0x63 [ 176.590551][ T8190] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 176.596628][ T8190] ? lock_chain_count+0x20/0x20 [ 176.601683][ T8190] ? seqcount_lockdep_reader_access+0x124/0x1c0 [ 176.608221][ T8190] ? lockdep_softirqs_on+0x570/0x570 [ 176.613530][ T8190] ? ktime_get+0x7f/0x280 [ 176.617867][ T8190] ? seqcount_lockdep_reader_access+0x176/0x1c0 [ 176.624130][ T8190] ? ktime_get_real_ts64+0x420/0x420 [ 176.629497][ T8190] ? bpf_prog_test_run+0x321/0x390 [ 176.634613][ T8190] ? __local_bh_disable_ip+0xf2/0x190 [ 176.640014][ T8190] ? __cant_sleep+0x210/0x210 [ 176.644750][ T8190] ? read_tsc+0x9/0x20 [ 176.648974][ T8190] ? ktime_get+0x24b/0x280 [ 176.653511][ T8190] ? bpf_test_run+0x15c/0x810 [ 176.658313][ T8190] bpf_test_run+0x2c7/0x810 [ 176.662852][ T8190] ? bpf_test_run+0x15c/0x810 [ 176.667536][ T8190] ? convert___skb_to_skb+0x590/0x590 [ 176.672914][ T8190] ? eth_get_headlen+0x200/0x200 [ 176.677892][ T8190] ? slab_build_skb+0x25f/0x3f0 [ 176.682751][ T8190] ? convert___skb_to_skb+0x3d/0x590 [ 176.688228][ T8190] bpf_prog_test_run_skb+0xa67/0x11c0 [ 176.693707][ T8190] ? cpu_online+0x60/0x60 [ 176.698118][ T8190] bpf_prog_test_run+0x321/0x390 [ 176.703122][ T8190] __sys_bpf+0x440/0x800 [ 176.707711][ T8190] ? bpf_link_show_fdinfo+0x350/0x350 [ 176.713392][ T8190] ? lock_chain_count+0x20/0x20 [ 176.718540][ T8190] __x64_sys_bpf+0x7c/0x90 [ 176.723004][ T8190] do_syscall_64+0x55/0xb0 [ 176.727428][ T8190] ? clear_bhb_loop+0x40/0x90 [ 176.732121][ T8190] ? clear_bhb_loop+0x40/0x90 [ 176.736829][ T8190] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.742743][ T8190] RIP: 0033:0x7f3a1838ebe9 [ 176.747194][ T8190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.766980][ T8190] RSP: 002b:00007f3a1918b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 176.775408][ T8190] RAX: ffffffffffffffda RBX: 00007f3a185b6090 RCX: 00007f3a1838ebe9 [ 176.783488][ T8190] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 176.791465][ T8190] RBP: 00007f3a1918b090 R08: 0000000000000000 R09: 0000000000000000 [ 176.799461][ T8190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.807546][ T8190] R13: 00007f3a185b6128 R14: 00007f3a185b6090 R15: 00007ffc15953248 [ 176.815886][ T8190] [ 176.842774][ T8178] netlink: 60 bytes leftover after parsing attributes in process `syz.0.907'. [ 176.852203][ T8178] netlink: 60 bytes leftover after parsing attributes in process `syz.0.907'. [ 176.870979][ T8183] netlink: 60 bytes leftover after parsing attributes in process `syz.0.907'. [ 176.928356][ T8178] netlink: 60 bytes leftover after parsing attributes in process `syz.0.907'. [ 177.254637][ T8205] netlink: 169856 bytes leftover after parsing attributes in process `syz.1.917'. [ 177.552001][ T8217] FAULT_INJECTION: forcing a failure. [ 177.552001][ T8217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.586410][ T8217] CPU: 1 PID: 8217 Comm: syz.0.922 Not tainted 6.6.102-syzkaller #0 [ 177.594543][ T8217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 177.604706][ T8217] Call Trace: [ 177.608007][ T8217] [ 177.611039][ T8217] dump_stack_lvl+0x16c/0x230 [ 177.616127][ T8217] ? show_regs_print_info+0x20/0x20 [ 177.621351][ T8217] ? load_image+0x3b0/0x3b0 [ 177.625883][ T8217] ? __might_fault+0xaa/0x120 [ 177.630594][ T8217] ? __lock_acquire+0x7c80/0x7c80 [ 177.635643][ T8217] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 177.641659][ T8217] should_fail_ex+0x39d/0x4d0 [ 177.646368][ T8217] _copy_from_user+0x2f/0xe0 [ 177.651266][ T8217] dev_ethtool+0xc5/0x1720 [ 177.655904][ T8217] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 177.662288][ T8217] ? __lock_acquire+0x7c80/0x7c80 [ 177.667442][ T8217] ? __might_fault+0xaa/0x120 [ 177.672272][ T8217] ? full_name_hash+0x92/0xe0 [ 177.677144][ T8217] ? dev_load+0x21/0x1f0 [ 177.681510][ T8217] dev_ioctl+0x4ca/0x1170 [ 177.685881][ T8217] sock_do_ioctl+0x226/0x2f0 [ 177.690517][ T8217] ? sock_show_fdinfo+0xb0/0xb0 [ 177.695425][ T8217] sock_ioctl+0x623/0x7a0 [ 177.699840][ T8217] ? sock_poll+0x3d0/0x3d0 [ 177.704301][ T8217] ? bpf_lsm_file_ioctl+0x9/0x10 [ 177.709360][ T8217] ? security_file_ioctl+0x80/0xa0 [ 177.714494][ T8217] ? sock_poll+0x3d0/0x3d0 [ 177.718932][ T8217] __se_sys_ioctl+0xfd/0x170 [ 177.723666][ T8217] do_syscall_64+0x55/0xb0 [ 177.728150][ T8217] ? clear_bhb_loop+0x40/0x90 [ 177.732964][ T8217] ? clear_bhb_loop+0x40/0x90 [ 177.737680][ T8217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.743604][ T8217] RIP: 0033:0x7f221078ebe9 [ 177.748212][ T8217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.768020][ T8217] RSP: 002b:00007f2211573038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.776719][ T8217] RAX: ffffffffffffffda RBX: 00007f22109b5fa0 RCX: 00007f221078ebe9 [ 177.784703][ T8217] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 177.792724][ T8217] RBP: 00007f2211573090 R08: 0000000000000000 R09: 0000000000000000 [ 177.800806][ T8217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.808868][ T8217] R13: 00007f22109b6038 R14: 00007f22109b5fa0 R15: 00007fffb51f7618 [ 177.816869][ T8217] [ 177.880014][ T8225] netlink: 60 bytes leftover after parsing attributes in process `syz.3.921'. [ 177.880588][ T8224] IPv6: Can't replace route, no match found [ 177.902914][ T8225] netlink: 60 bytes leftover after parsing attributes in process `syz.3.921'. [ 177.916735][ T8216] netlink: 60 bytes leftover after parsing attributes in process `syz.3.921'. [ 178.663775][ T8261] FAULT_INJECTION: forcing a failure. [ 178.663775][ T8261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.677498][ T8261] CPU: 0 PID: 8261 Comm: syz.0.939 Not tainted 6.6.102-syzkaller #0 [ 178.685883][ T8261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.696061][ T8261] Call Trace: [ 178.699439][ T8261] [ 178.702396][ T8261] dump_stack_lvl+0x16c/0x230 [ 178.707211][ T8261] ? show_regs_print_info+0x20/0x20 [ 178.712946][ T8261] ? load_image+0x3b0/0x3b0 [ 178.717591][ T8261] ? __might_fault+0xaa/0x120 [ 178.722301][ T8261] ? __lock_acquire+0x7c80/0x7c80 [ 178.727360][ T8261] should_fail_ex+0x39d/0x4d0 [ 178.732164][ T8261] _copy_from_user+0x2f/0xe0 [ 178.736892][ T8261] ___sys_recvmsg+0x12f/0x510 [ 178.741621][ T8261] ? __sys_recvmsg+0x270/0x270 [ 178.746427][ T8261] ? ksys_write+0x1c1/0x250 [ 178.750964][ T8261] ? __fget_files+0x44a/0x4d0 [ 178.755686][ T8261] __x64_sys_recvmsg+0x1f2/0x2c0 [ 178.760666][ T8261] ? ___sys_recvmsg+0x510/0x510 [ 178.765915][ T8261] ? lockdep_hardirqs_on+0x98/0x150 [ 178.771534][ T8261] do_syscall_64+0x55/0xb0 [ 178.776060][ T8261] ? clear_bhb_loop+0x40/0x90 [ 178.781202][ T8261] ? clear_bhb_loop+0x40/0x90 [ 178.785909][ T8261] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.791832][ T8261] RIP: 0033:0x7f221078ebe9 [ 178.796364][ T8261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.816179][ T8261] RSP: 002b:00007f2211573038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 178.824686][ T8261] RAX: ffffffffffffffda RBX: 00007f22109b5fa0 RCX: 00007f221078ebe9 [ 178.832773][ T8261] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 178.840770][ T8261] RBP: 00007f2211573090 R08: 0000000000000000 R09: 0000000000000000 [ 178.848774][ T8261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.856782][ T8261] R13: 00007f22109b6038 R14: 00007f22109b5fa0 R15: 00007fffb51f7618 [ 178.864971][ T8261] [ 179.041023][ T5798] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 179.070391][ T8275] FAULT_INJECTION: forcing a failure. [ 179.070391][ T8275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.095227][ T8275] CPU: 0 PID: 8275 Comm: syz.1.944 Not tainted 6.6.102-syzkaller #0 [ 179.103293][ T8275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.113463][ T8275] Call Trace: [ 179.116860][ T8275] [ 179.119850][ T8275] dump_stack_lvl+0x16c/0x230 [ 179.124550][ T8275] ? show_regs_print_info+0x20/0x20 [ 179.129835][ T8275] ? load_image+0x3b0/0x3b0 [ 179.134372][ T8275] ? __might_fault+0xaa/0x120 [ 179.139086][ T8275] ? __lock_acquire+0x7c80/0x7c80 [ 179.144170][ T8275] should_fail_ex+0x39d/0x4d0 [ 179.148893][ T8275] _copy_to_user+0x2f/0xa0 [ 179.153336][ T8275] bpf_test_finish+0x4d8/0x620 [ 179.158144][ T8275] ? convert___skb_to_skb+0x590/0x590 [ 179.163551][ T8275] ? convert_skb_to___skb+0x420/0x420 [ 179.168961][ T8275] ? slab_build_skb+0x25f/0x3f0 [ 179.173842][ T8275] bpf_prog_test_run_skb+0xc28/0x11c0 [ 179.179266][ T8275] ? cpu_online+0x60/0x60 [ 179.183765][ T8275] bpf_prog_test_run+0x321/0x390 [ 179.188738][ T8275] __sys_bpf+0x440/0x800 [ 179.193104][ T8275] ? bpf_link_show_fdinfo+0x350/0x350 [ 179.198532][ T8275] ? lock_chain_count+0x20/0x20 [ 179.203419][ T8275] __x64_sys_bpf+0x7c/0x90 [ 179.207968][ T8275] do_syscall_64+0x55/0xb0 [ 179.212411][ T8275] ? clear_bhb_loop+0x40/0x90 [ 179.217202][ T8275] ? clear_bhb_loop+0x40/0x90 [ 179.221912][ T8275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.227936][ T8275] RIP: 0033:0x7f3a1838ebe9 [ 179.232375][ T8275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.252185][ T8275] RSP: 002b:00007f3a191ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 179.260888][ T8275] RAX: ffffffffffffffda RBX: 00007f3a185b5fa0 RCX: 00007f3a1838ebe9 [ 179.269077][ T8275] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 179.277167][ T8275] RBP: 00007f3a191ac090 R08: 0000000000000000 R09: 0000000000000000 [ 179.285441][ T8275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.293451][ T8275] R13: 00007f3a185b6038 R14: 00007f3a185b5fa0 R15: 00007ffc15953248 [ 179.301536][ T8275] [ 179.584484][ T8288] FAULT_INJECTION: forcing a failure. [ 179.584484][ T8288] name failslab, interval 1, probability 0, space 0, times 0 [ 179.608777][ T8288] CPU: 0 PID: 8288 Comm: syz.3.951 Not tainted 6.6.102-syzkaller #0 [ 179.616834][ T8288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.627003][ T8288] Call Trace: [ 179.630569][ T8288] [ 179.633514][ T8288] dump_stack_lvl+0x16c/0x230 [ 179.638201][ T8288] ? show_regs_print_info+0x20/0x20 [ 179.643487][ T8288] ? load_image+0x3b0/0x3b0 [ 179.647995][ T8288] ? __lock_acquire+0x7c80/0x7c80 [ 179.653014][ T8288] ? __asan_memset+0x22/0x40 [ 179.657623][ T8288] should_fail_ex+0x39d/0x4d0 [ 179.662301][ T8288] should_failslab+0x9/0x20 [ 179.666908][ T8288] slab_pre_alloc_hook+0x59/0x310 [ 179.672002][ T8288] kmem_cache_alloc+0x5a/0x2e0 [ 179.676852][ T8288] ? security_inode_alloc+0x34/0x110 [ 179.682232][ T8288] security_inode_alloc+0x34/0x110 [ 179.687439][ T8288] inode_init_always+0x8fc/0xc90 [ 179.692463][ T8288] new_inode_pseudo+0x95/0x1d0 [ 179.697228][ T8288] __sock_create+0x12d/0x940 [ 179.701907][ T8288] ? __might_fault+0xaa/0x120 [ 179.706578][ T8288] ? __might_fault+0xc6/0x120 [ 179.711516][ T8288] __sys_socketpair+0x1c1/0x550 [ 179.716367][ T8288] __x64_sys_socketpair+0x9b/0xb0 [ 179.721389][ T8288] do_syscall_64+0x55/0xb0 [ 179.725927][ T8288] ? clear_bhb_loop+0x40/0x90 [ 179.731058][ T8288] ? clear_bhb_loop+0x40/0x90 [ 179.735927][ T8288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.741908][ T8288] RIP: 0033:0x7f218638ebe9 [ 179.746324][ T8288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.765980][ T8288] RSP: 002b:00007f218711a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 179.774597][ T8288] RAX: ffffffffffffffda RBX: 00007f21865b5fa0 RCX: 00007f218638ebe9 [ 179.782717][ T8288] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 000000000000000b [ 179.790713][ T8288] RBP: 00007f218711a090 R08: 0000000000000000 R09: 0000000000000000 [ 179.798870][ T8288] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.806948][ T8288] R13: 00007f21865b6038 R14: 00007f21865b5fa0 R15: 00007fffedf84678 [ 179.814961][ T8288] [ 179.868381][ T8288] socket: no more sockets [ 179.876538][ T8285] netlink: 'syz.2.949': attribute type 17 has an invalid length. [ 180.096706][ T8295] __nla_validate_parse: 1 callbacks suppressed [ 180.096724][ T8295] netlink: 5 bytes leftover after parsing attributes in process `syz.3.954'. [ 180.198829][ T8295] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.954'. [ 180.645976][ T8324] FAULT_INJECTION: forcing a failure. [ 180.645976][ T8324] name failslab, interval 1, probability 0, space 0, times 0 [ 180.688420][ T8324] CPU: 0 PID: 8324 Comm: syz.2.966 Not tainted 6.6.102-syzkaller #0 [ 180.696476][ T8324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.706569][ T8324] Call Trace: [ 180.709961][ T8324] [ 180.712919][ T8324] dump_stack_lvl+0x16c/0x230 [ 180.717730][ T8324] ? show_regs_print_info+0x20/0x20 [ 180.722967][ T8324] ? load_image+0x3b0/0x3b0 [ 180.727503][ T8324] ? __might_sleep+0xe0/0xe0 [ 180.732128][ T8324] ? __lock_acquire+0x7c80/0x7c80 [ 180.737191][ T8324] should_fail_ex+0x39d/0x4d0 [ 180.741914][ T8324] should_failslab+0x9/0x20 [ 180.746460][ T8324] slab_pre_alloc_hook+0x59/0x310 [ 180.751499][ T8324] ? fib6_get_table+0x39/0x260 [ 180.756461][ T8324] ? fib6_info_alloc+0x32/0xe0 [ 180.761236][ T8324] ? fib6_info_alloc+0x32/0xe0 [ 180.765998][ T8324] __kmem_cache_alloc_node+0x53/0x260 [ 180.771498][ T8324] ? fib6_info_alloc+0x32/0xe0 [ 180.776690][ T8324] __kmalloc+0xa4/0x240 [ 180.780943][ T8324] fib6_info_alloc+0x32/0xe0 [ 180.785720][ T8324] ip6_route_info_create+0x44f/0x1200 [ 180.791184][ T8324] ? nla_memcpy+0x59/0xb0 [ 180.795606][ T8324] ? nla_find+0x138/0x150 [ 180.799935][ T8324] inet6_rtm_newroute+0x4e6/0x1b40 [ 180.805079][ T8324] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 180.811012][ T8324] ? rcu_is_watching+0x15/0xb0 [ 180.815838][ T8324] ? trace_contention_end+0x39/0xe0 [ 180.821093][ T8324] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 180.827077][ T8324] rtnetlink_rcv_msg+0x7c7/0xf10 [ 180.832011][ T8324] ? __dev_queue_xmit+0x245/0x35a0 [ 180.837120][ T8324] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 180.842238][ T8324] ? rtnetlink_bind+0x80/0x80 [ 180.847010][ T8324] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 180.853249][ T8324] ? __dev_queue_xmit+0x245/0x35a0 [ 180.858449][ T8324] ? lock_chain_count+0x20/0x20 [ 180.863295][ T8324] ? __local_bh_enable_ip+0x12e/0x1c0 [ 180.868752][ T8324] ? lockdep_hardirqs_on+0x98/0x150 [ 180.874124][ T8324] ? __local_bh_enable_ip+0x12e/0x1c0 [ 180.879516][ T8324] ? _local_bh_enable+0xa0/0xa0 [ 180.884526][ T8324] ? __dev_queue_xmit+0x245/0x35a0 [ 180.889640][ T8324] ? __dev_queue_xmit+0x1449/0x35a0 [ 180.894844][ T8324] ? __dev_queue_xmit+0x245/0x35a0 [ 180.899954][ T8324] ? netlink_deliver_tap+0x2e/0x1b0 [ 180.905157][ T8324] ? perf_trace_lock+0xf7/0x380 [ 180.910186][ T8324] ? __copy_skb_header+0xa7/0x550 [ 180.915307][ T8324] netlink_rcv_skb+0x216/0x480 [ 180.920250][ T8324] ? rtnetlink_bind+0x80/0x80 [ 180.924940][ T8324] ? netlink_ack+0x1110/0x1110 [ 180.929825][ T8324] ? __lock_acquire+0x7c80/0x7c80 [ 180.934854][ T8324] ? netlink_deliver_tap+0x2e/0x1b0 [ 180.940170][ T8324] netlink_unicast+0x751/0x8d0 [ 180.945073][ T8324] netlink_sendmsg+0x8c1/0xbe0 [ 180.949915][ T8324] ? netlink_getsockopt+0x580/0x580 [ 180.955293][ T8324] ? aa_sock_msg_perm+0x94/0x150 [ 180.960316][ T8324] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 180.965604][ T8324] ? security_socket_sendmsg+0x80/0xa0 [ 180.971237][ T8324] ? netlink_getsockopt+0x580/0x580 [ 180.976437][ T8324] ____sys_sendmsg+0x5bf/0x950 [ 180.981207][ T8324] ? __asan_memset+0x22/0x40 [ 180.986120][ T8324] ? __sys_sendmsg_sock+0x30/0x30 [ 180.991365][ T8324] ? __import_iovec+0x5f2/0x860 [ 180.996324][ T8324] ? import_iovec+0x73/0xa0 [ 181.001090][ T8324] ___sys_sendmsg+0x220/0x290 [ 181.006238][ T8324] ? __sys_sendmsg+0x270/0x270 [ 181.011224][ T8324] ? __lock_acquire+0x7c80/0x7c80 [ 181.016278][ T8324] __se_sys_sendmsg+0x1a5/0x270 [ 181.021219][ T8324] ? __x64_sys_sendmsg+0x80/0x80 [ 181.026167][ T8324] ? lockdep_hardirqs_on+0x98/0x150 [ 181.031715][ T8324] do_syscall_64+0x55/0xb0 [ 181.036130][ T8324] ? clear_bhb_loop+0x40/0x90 [ 181.040882][ T8324] ? clear_bhb_loop+0x40/0x90 [ 181.045553][ T8324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.051650][ T8324] RIP: 0033:0x7fae9b78ebe9 [ 181.056326][ T8324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.076383][ T8324] RSP: 002b:00007fae9c576038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.084821][ T8324] RAX: ffffffffffffffda RBX: 00007fae9b9b5fa0 RCX: 00007fae9b78ebe9 [ 181.092918][ T8324] RDX: 0000000000048002 RSI: 0000200000000080 RDI: 0000000000000003 [ 181.101165][ T8324] RBP: 00007fae9c576090 R08: 0000000000000000 R09: 0000000000000000 [ 181.109758][ T8324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.117909][ T8324] R13: 00007fae9b9b6038 R14: 00007fae9b9b5fa0 R15: 00007ffe4f2a36c8 [ 181.126502][ T8324] [ 181.470631][ T8329] syzkaller0: entered promiscuous mode [ 181.476453][ T8329] syzkaller0: entered allmulticast mode [ 181.565990][ T8340] netlink: 5 bytes leftover after parsing attributes in process `syz.0.970'. [ 183.767462][ T8341] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.970'. [ 184.308866][ T8379] FAULT_INJECTION: forcing a failure. [ 184.308866][ T8379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.329194][ T8379] CPU: 0 PID: 8379 Comm: syz.0.986 Not tainted 6.6.102-syzkaller #0 [ 184.337427][ T8379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 184.347528][ T8379] Call Trace: [ 184.350842][ T8379] [ 184.353810][ T8379] dump_stack_lvl+0x16c/0x230 [ 184.358612][ T8379] ? show_regs_print_info+0x20/0x20 [ 184.363880][ T8379] ? load_image+0x3b0/0x3b0 [ 184.368439][ T8379] ? __might_fault+0xaa/0x120 [ 184.373245][ T8379] ? __lock_acquire+0x7c80/0x7c80 [ 184.378390][ T8379] should_fail_ex+0x39d/0x4d0 [ 184.383219][ T8379] _copy_from_iter+0x1d3/0x1290 [ 184.388106][ T8379] ? slab_post_alloc_hook+0x8a/0x4d0 [ 184.394404][ T8379] ? __virt_addr_valid+0x18c/0x540 [ 184.399652][ T8379] ? __lock_acquire+0x7c80/0x7c80 [ 184.404772][ T8379] ? rcu_is_watching+0x15/0xb0 [ 184.409590][ T8379] ? copyout_mc+0x70/0x70 [ 184.413974][ T8379] ? __virt_addr_valid+0x18c/0x540 [ 184.419219][ T8379] ? __virt_addr_valid+0x18c/0x540 [ 184.424470][ T8379] ? __virt_addr_valid+0x469/0x540 [ 184.429723][ T8379] ? __check_object_size+0x506/0xa30 [ 184.435241][ T8379] netlink_sendmsg+0x75c/0xbe0 [ 184.440075][ T8379] ? netlink_getsockopt+0x580/0x580 [ 184.445439][ T8379] ? aa_sock_msg_perm+0x94/0x150 [ 184.450433][ T8379] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 184.455766][ T8379] ? security_socket_sendmsg+0x80/0xa0 [ 184.461259][ T8379] ? netlink_getsockopt+0x580/0x580 [ 184.466680][ T8379] ____sys_sendmsg+0x5bf/0x950 [ 184.471465][ T8379] ? __asan_memset+0x22/0x40 [ 184.476078][ T8379] ? __sys_sendmsg_sock+0x30/0x30 [ 184.481117][ T8379] ? __import_iovec+0x5f2/0x860 [ 184.486093][ T8379] ? import_iovec+0x73/0xa0 [ 184.490813][ T8379] ___sys_sendmsg+0x220/0x290 [ 184.495611][ T8379] ? __sys_sendmsg+0x270/0x270 [ 184.500458][ T8379] ? __lock_acquire+0x7c80/0x7c80 [ 184.505536][ T8379] __se_sys_sendmsg+0x1a5/0x270 [ 184.510484][ T8379] ? __x64_sys_sendmsg+0x80/0x80 [ 184.515486][ T8379] ? lockdep_hardirqs_on+0x98/0x150 [ 184.520715][ T8379] do_syscall_64+0x55/0xb0 [ 184.525235][ T8379] ? clear_bhb_loop+0x40/0x90 [ 184.529928][ T8379] ? clear_bhb_loop+0x40/0x90 [ 184.534608][ T8379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.540526][ T8379] RIP: 0033:0x7f221078ebe9 [ 184.544946][ T8379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.565008][ T8379] RSP: 002b:00007f2211552038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.573551][ T8379] RAX: ffffffffffffffda RBX: 00007f22109b6090 RCX: 00007f221078ebe9 [ 184.581707][ T8379] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 184.589875][ T8379] RBP: 00007f2211552090 R08: 0000000000000000 R09: 0000000000000000 [ 184.598045][ T8379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.606637][ T8379] R13: 00007f22109b6128 R14: 00007f22109b6090 R15: 00007fffb51f7618 [ 184.615180][ T8379] [ 184.637454][ T8385] netlink: 5 bytes leftover after parsing attributes in process `syz.2.988'. [ 184.661656][ T8385] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.988'. [ 184.942996][ T8395] sit0: entered allmulticast mode [ 185.209013][ T8409] FAULT_INJECTION: forcing a failure. [ 185.209013][ T8409] name failslab, interval 1, probability 0, space 0, times 0 [ 185.228624][ T8409] CPU: 0 PID: 8409 Comm: syz.3.998 Not tainted 6.6.102-syzkaller #0 [ 185.236706][ T8409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.246901][ T8409] Call Trace: [ 185.250306][ T8409] [ 185.253301][ T8409] dump_stack_lvl+0x16c/0x230 [ 185.258152][ T8409] ? show_regs_print_info+0x20/0x20 [ 185.263425][ T8409] ? load_image+0x3b0/0x3b0 [ 185.267995][ T8409] ? __might_sleep+0xe0/0xe0 [ 185.272639][ T8409] ? __lock_acquire+0x7c80/0x7c80 [ 185.277772][ T8409] should_fail_ex+0x39d/0x4d0 [ 185.282618][ T8409] should_failslab+0x9/0x20 [ 185.287165][ T8409] slab_pre_alloc_hook+0x59/0x310 [ 185.292254][ T8409] ? verify_lock_unused+0x140/0x140 [ 185.297881][ T8409] kmem_cache_alloc_lru+0x4d/0x2e0 [ 185.303018][ T8409] ? __d_alloc+0x31/0x730 [ 185.307379][ T8409] __d_alloc+0x31/0x730 [ 185.311579][ T8409] d_alloc_parallel+0xdd/0x1480 [ 185.316457][ T8409] ? __d_lookup+0x8f/0x7c0 [ 185.320981][ T8409] ? __lock_acquire+0x7c80/0x7c80 [ 185.326315][ T8409] ? __d_lookup+0x8f/0x7c0 [ 185.330779][ T8409] ? d_hash_and_lookup+0x1b0/0x1b0 [ 185.336051][ T8409] path_openat+0x907/0x3190 [ 185.340828][ T8409] ? perf_trace_lock_acquire+0x32a/0x3e0 [ 185.346492][ T8409] ? do_filp_open+0x3d0/0x3d0 [ 185.351279][ T8409] do_filp_open+0x1c5/0x3d0 [ 185.355820][ T8409] ? vfs_tmpfile+0x490/0x490 [ 185.360534][ T8409] ? noop_direct_IO+0x20/0x20 [ 185.365258][ T8409] ? _raw_spin_unlock+0x28/0x40 [ 185.370299][ T8409] ? alloc_fd+0x58f/0x630 [ 185.374687][ T8409] do_sys_openat2+0x12c/0x1c0 [ 185.379596][ T8409] ? do_sys_open+0xe0/0xe0 [ 185.384037][ T8409] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 185.390280][ T8409] ? lock_chain_count+0x20/0x20 [ 185.395294][ T8409] __x64_sys_openat+0x139/0x160 [ 185.400259][ T8409] do_syscall_64+0x55/0xb0 [ 185.404692][ T8409] ? clear_bhb_loop+0x40/0x90 [ 185.409388][ T8409] ? clear_bhb_loop+0x40/0x90 [ 185.414108][ T8409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.420230][ T8409] RIP: 0033:0x7f218638d550 [ 185.425044][ T8409] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 185.444856][ T8409] RSP: 002b:00007f2187119f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 185.453296][ T8409] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f218638d550 [ 185.461330][ T8409] RDX: 0000000000000002 RSI: 00007f2187119fa0 RDI: 00000000ffffff9c [ 185.469322][ T8409] RBP: 00007f2187119fa0 R08: 0000000000000000 R09: 0000000000000000 [ 185.477388][ T8409] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 185.485368][ T8409] R13: 00007f21865b6038 R14: 00007f21865b5fa0 R15: 00007fffedf84678 [ 185.493395][ T8409] [ 186.055188][ T8429] FAULT_INJECTION: forcing a failure. [ 186.055188][ T8429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.069440][ T8429] CPU: 0 PID: 8429 Comm: syz.3.1004 Not tainted 6.6.102-syzkaller #0 [ 186.077642][ T8429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 186.087811][ T8429] Call Trace: [ 186.091326][ T8429] [ 186.094274][ T8429] dump_stack_lvl+0x16c/0x230 [ 186.098998][ T8429] ? show_regs_print_info+0x20/0x20 [ 186.104328][ T8429] ? load_image+0x3b0/0x3b0 [ 186.108961][ T8429] ? __might_fault+0xaa/0x120 [ 186.113754][ T8429] ? __lock_acquire+0x7c80/0x7c80 [ 186.118985][ T8429] should_fail_ex+0x39d/0x4d0 [ 186.123881][ T8429] _copy_from_iter+0x1d3/0x1290 [ 186.128771][ T8429] ? __might_fault+0xaa/0x120 [ 186.133473][ T8429] ? _copy_from_iter+0x248/0x1290 [ 186.138503][ T8429] ? __virt_addr_valid+0x18c/0x540 [ 186.143710][ T8429] ? __lock_acquire+0x7c80/0x7c80 [ 186.148737][ T8429] ? copyout_mc+0x70/0x70 [ 186.153180][ T8429] ? copyout_mc+0x70/0x70 [ 186.157786][ T8429] ? __virt_addr_valid+0x18c/0x540 [ 186.162914][ T8429] ? page_copy_sane+0x16a/0x270 [ 186.167793][ T8429] copy_page_from_iter+0x7b/0x100 [ 186.172847][ T8429] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 186.178766][ T8429] tun_get_user+0x1583/0x3bf0 [ 186.183685][ T8429] ? aa_file_perm+0x120/0xec0 [ 186.188376][ T8429] ? aa_file_perm+0x3e8/0xec0 [ 186.193318][ T8429] ? rcu_read_unlock+0xa0/0xa0 [ 186.198277][ T8429] ? tun_get+0x1c/0x2e0 [ 186.202605][ T8429] ? __lock_acquire+0x7c80/0x7c80 [ 186.207825][ T8429] ? tun_get+0x1c/0x2e0 [ 186.211987][ T8429] tun_chr_write_iter+0x119/0x200 [ 186.217109][ T8429] vfs_write+0x43b/0x940 [ 186.221443][ T8429] ? file_end_write+0x250/0x250 [ 186.226462][ T8429] ? __fget_files+0x44a/0x4d0 [ 186.231318][ T8429] ? __fdget_pos+0x1d8/0x330 [ 186.235903][ T8429] ? ksys_write+0x75/0x250 [ 186.240330][ T8429] ksys_write+0x147/0x250 [ 186.244661][ T8429] ? __ia32_sys_read+0x90/0x90 [ 186.249422][ T8429] ? lockdep_hardirqs_on+0x98/0x150 [ 186.254637][ T8429] do_syscall_64+0x55/0xb0 [ 186.259137][ T8429] ? clear_bhb_loop+0x40/0x90 [ 186.263808][ T8429] ? clear_bhb_loop+0x40/0x90 [ 186.268534][ T8429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.274440][ T8429] RIP: 0033:0x7f218638ebe9 [ 186.278846][ T8429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.298718][ T8429] RSP: 002b:00007f218711a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.307302][ T8429] RAX: ffffffffffffffda RBX: 00007f21865b5fa0 RCX: 00007f218638ebe9 [ 186.315613][ T8429] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 186.323761][ T8429] RBP: 00007f218711a090 R08: 0000000000000000 R09: 0000000000000000 [ 186.332013][ T8429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.340155][ T8429] R13: 00007f21865b6038 R14: 00007f21865b5fa0 R15: 00007fffedf84678 [ 186.348341][ T8429] [ 186.598572][ T8437] netlink: 'syz.3.1007': attribute type 4 has an invalid length. [ 186.631499][ T8437] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1007'. [ 187.056203][ T8450] Q6\bY4: renamed from lo (while UP) [ 187.297341][ T8455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.341511][ T8455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.415004][ T8455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.427609][ T8455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.430168][ T8463] netlink: 'syz.0.1017': attribute type 4 has an invalid length. [ 187.452326][ T8455] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 187.470902][ T8455] batman_adv: batadv0: Removing interface: virt_wifi0 [ 187.473046][ T8463] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1017'. [ 188.312423][ T8486] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1031'. [ 188.420796][ T8490] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1023'. [ 189.112401][ T8513] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1034'. [ 189.141467][ T8513] FAULT_INJECTION: forcing a failure. [ 189.141467][ T8513] name failslab, interval 1, probability 0, space 0, times 0 [ 189.170409][ T8513] CPU: 1 PID: 8513 Comm: syz.0.1034 Not tainted 6.6.102-syzkaller #0 [ 189.178621][ T8513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.188679][ T8513] Call Trace: [ 189.191980][ T8513] [ 189.194904][ T8513] dump_stack_lvl+0x16c/0x230 [ 189.199588][ T8513] ? show_regs_print_info+0x20/0x20 [ 189.204805][ T8513] ? load_image+0x3b0/0x3b0 [ 189.209315][ T8513] ? __might_sleep+0xe0/0xe0 [ 189.214076][ T8513] ? __lock_acquire+0x7c80/0x7c80 [ 189.219100][ T8513] should_fail_ex+0x39d/0x4d0 [ 189.223843][ T8513] should_failslab+0x9/0x20 [ 189.228348][ T8513] slab_pre_alloc_hook+0x59/0x310 [ 189.233375][ T8513] ? lockdep_hardirqs_on+0x98/0x150 [ 189.238656][ T8513] kmem_cache_alloc_node+0x60/0x330 [ 189.243962][ T8513] ? __alloc_skb+0x108/0x2c0 [ 189.248610][ T8513] __alloc_skb+0x108/0x2c0 [ 189.253036][ T8513] netlink_ack+0x376/0x1110 [ 189.257577][ T8513] ? __dev_queue_xmit+0x245/0x35a0 [ 189.262776][ T8513] ? netlink_dump+0xde0/0xde0 [ 189.267447][ T8513] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.272727][ T8513] ? perf_trace_lock+0xf7/0x380 [ 189.277573][ T8513] ? __copy_skb_header+0xa7/0x550 [ 189.282686][ T8513] netlink_rcv_skb+0x29a/0x480 [ 189.287448][ T8513] ? rtnetlink_bind+0x80/0x80 [ 189.292184][ T8513] ? netlink_ack+0x1110/0x1110 [ 189.297126][ T8513] ? __lock_acquire+0x7c80/0x7c80 [ 189.302376][ T8513] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.307738][ T8513] netlink_unicast+0x751/0x8d0 [ 189.312728][ T8513] netlink_sendmsg+0x8c1/0xbe0 [ 189.317499][ T8513] ? netlink_getsockopt+0x580/0x580 [ 189.322894][ T8513] ? aa_sock_msg_perm+0x94/0x150 [ 189.327827][ T8513] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 189.333121][ T8513] ? security_socket_sendmsg+0x80/0xa0 [ 189.338579][ T8513] ? netlink_getsockopt+0x580/0x580 [ 189.343772][ T8513] ____sys_sendmsg+0x5bf/0x950 [ 189.348555][ T8513] ? __asan_memset+0x22/0x40 [ 189.353163][ T8513] ? __sys_sendmsg_sock+0x30/0x30 [ 189.358180][ T8513] ? __import_iovec+0x5f2/0x860 [ 189.363321][ T8513] ? import_iovec+0x73/0xa0 [ 189.367823][ T8513] ___sys_sendmsg+0x220/0x290 [ 189.372540][ T8513] ? __sys_sendmsg+0x270/0x270 [ 189.377338][ T8513] ? __lock_acquire+0x7c80/0x7c80 [ 189.382477][ T8513] __se_sys_sendmsg+0x1a5/0x270 [ 189.387327][ T8513] ? __x64_sys_sendmsg+0x80/0x80 [ 189.392286][ T8513] ? lockdep_hardirqs_on+0x98/0x150 [ 189.397486][ T8513] do_syscall_64+0x55/0xb0 [ 189.401892][ T8513] ? clear_bhb_loop+0x40/0x90 [ 189.406559][ T8513] ? clear_bhb_loop+0x40/0x90 [ 189.411228][ T8513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.417246][ T8513] RIP: 0033:0x7f221078ebe9 [ 189.421756][ T8513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.441366][ T8513] RSP: 002b:00007f2211573038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.449779][ T8513] RAX: ffffffffffffffda RBX: 00007f22109b5fa0 RCX: 00007f221078ebe9 [ 189.457836][ T8513] RDX: 0000000000048054 RSI: 0000200000000080 RDI: 0000000000000003 [ 189.465797][ T8513] RBP: 00007f2211573090 R08: 0000000000000000 R09: 0000000000000000 [ 189.473768][ T8513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.481739][ T8513] R13: 00007f22109b6038 R14: 00007f22109b5fa0 R15: 00007fffb51f7618 [ 189.489714][ T8513] [ 189.529347][ T8515] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1033'. [ 189.556231][ T8515] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1033'. [ 189.744132][ T8522] FAULT_INJECTION: forcing a failure. [ 189.744132][ T8522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.745202][ T8522] [ 189.745209][ T8522] ====================================================== [ 189.745214][ T8522] WARNING: possible circular locking dependency detected [ 189.745232][ T8522] 6.6.102-syzkaller #0 Not tainted [ 189.745240][ T8522] ------------------------------------------------------ [ 189.745244][ T8522] syz.0.1036/8522 is trying to acquire lock: [ 189.745251][ T8522] ffffffff8cd23e20 (console_owner){-...}-{0:0}, at: console_flush_all+0x10f/0xd00 [ 189.745293][ T8522] [ 189.745293][ T8522] but task is already holding lock: [ 189.745298][ T8522] ffff8880b8e3c458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 189.745332][ T8522] [ 189.745332][ T8522] which lock already depends on the new lock. [ 189.745332][ T8522] [ 189.745336][ T8522] [ 189.745336][ T8522] the existing dependency chain (in reverse order) is: [ 189.745340][ T8522] [ 189.745340][ T8522] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 189.745357][ T8522] _raw_spin_lock_nested+0x32/0x50 [ 189.745376][ T8522] raw_spin_rq_lock_nested+0x2a/0x140 [ 189.745391][ T8522] task_fork_fair+0x62/0x1f0 [ 189.745404][ T8522] sched_cgroup_fork+0x333/0x3c0 [ 189.745417][ T8522] copy_process+0x21e4/0x3d70 [ 189.745431][ T8522] kernel_clone+0x21b/0x840 [ 189.745444][ T8522] user_mode_thread+0xde/0x130 [ 189.745455][ T8522] rest_init+0x27/0x300 [ 189.745466][ T8522] arch_call_rest_init+0xe/0x10 [ 189.745484][ T8522] start_kernel+0x459/0x4e0 [ 189.745500][ T8522] x86_64_start_reservations+0x2a/0x30 [ 189.745517][ T8522] copy_bootdata+0x0/0xe0 [ 189.745532][ T8522] secondary_startup_64_no_verify+0x179/0x17b [ 189.745550][ T8522] [ 189.745550][ T8522] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 189.745569][ T8522] _raw_spin_lock_irqsave+0xa8/0xf0 [ 189.745587][ T8522] try_to_wake_up+0x60/0x1140 [ 189.745605][ T8522] kick_pool+0x320/0x420 [ 189.745617][ T8522] create_worker+0x5c0/0x7b0 [ 189.745630][ T8522] workqueue_init+0x306/0x670 [ 189.745645][ T8522] kernel_init_freeable+0x3a0/0x570 [ 189.745663][ T8522] kernel_init+0x1d/0x1c0 [ 189.745673][ T8522] ret_from_fork+0x48/0x80 [ 189.745688][ T8522] ret_from_fork_asm+0x11/0x20 [ 189.745704][ T8522] [ 189.745704][ T8522] -> #3 (&pool->lock){-.-.}-{2:2}: [ 189.745723][ T8522] _raw_spin_lock+0x2e/0x40 [ 189.745740][ T8522] __queue_work+0x69f/0x1020 [ 189.745752][ T8522] queue_work_on+0x121/0x1e0 [ 189.745762][ T8522] rpm_suspend+0x10bc/0x1a90 [ 189.745777][ T8522] __pm_runtime_idle+0x12f/0x1a0 [ 189.745790][ T8522] __device_attach+0x33f/0x400 [ 189.745805][ T8522] bus_probe_device+0x180/0x260 [ 189.745817][ T8522] device_add+0x85b/0xc20 [ 189.745843][ T8522] serial_base_port_add+0x2f2/0x420 [ 189.745859][ T8522] serial_core_register_port+0x36d/0x2320 [ 189.745879][ T8522] serial8250_register_8250_port+0x15ec/0x1f10 [ 189.745894][ T8522] serial_pnp_probe+0x549/0x730 [ 189.745909][ T8522] pnp_device_probe+0x305/0x4b0 [ 189.745925][ T8522] really_probe+0x25b/0xb40 [ 189.745940][ T8522] __driver_probe_device+0x18c/0x330 [ 189.745953][ T8522] driver_probe_device+0x4f/0x420 [ 189.745967][ T8522] __driver_attach+0x44e/0x6f0 [ 189.745981][ T8522] bus_for_each_dev+0x22d/0x2a0 [ 189.745992][ T8522] bus_add_driver+0x340/0x640 [ 189.746004][ T8522] driver_register+0x23a/0x310 [ 189.746019][ T8522] serial8250_init+0x9a/0x170 [ 189.746036][ T8522] do_one_initcall+0x1fd/0x750 [ 189.746052][ T8522] do_initcall_level+0x137/0x1f0 [ 189.746069][ T8522] do_initcalls+0x69/0xd0 [ 189.746085][ T8522] kernel_init_freeable+0x3d2/0x570 [ 189.746103][ T8522] kernel_init+0x1d/0x1c0 [ 189.746114][ T8522] ret_from_fork+0x48/0x80 [ 189.746128][ T8522] ret_from_fork_asm+0x11/0x20 [ 189.746144][ T8522] [ 189.746144][ T8522] -> #2 (&dev->power.lock){-.-.}-{2:2}: [ 189.746163][ T8522] _raw_spin_lock_irqsave+0xa8/0xf0 [ 189.746182][ T8522] __pm_runtime_resume+0x10f/0x170 [ 189.746195][ T8522] __uart_start+0x171/0x3e0 [ 189.746213][ T8522] uart_write+0x449/0x5d0 [ 189.746231][ T8522] n_tty_write+0xd27/0x11d0 [ 189.746250][ T8522] file_tty_write+0x54b/0x980 [ 189.746264][ T8522] vfs_write+0x43b/0x940 [ 189.746279][ T8522] ksys_write+0x147/0x250 [ 189.746294][ T8522] do_syscall_64+0x55/0xb0 [ 189.746309][ T8522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.746334][ T8522] [ 189.746334][ T8522] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 189.746353][ T8522] _raw_spin_lock_irqsave+0xa8/0xf0 [ 189.746372][ T8522] serial8250_console_write+0x16d/0x17a0 [ 189.746388][ T8522] console_flush_all+0x6cd/0xd00 [ 189.746404][ T8522] console_unlock+0xae/0x340 [ 189.746418][ T8522] vprintk_emit+0x477/0x600 [ 189.746432][ T8522] _printk+0xd0/0x110 [ 189.746450][ T8522] register_console+0x91b/0xe60 [ 189.746465][ T8522] univ8250_console_init+0x45/0x50 [ 189.746482][ T8522] console_init+0x17b/0x5e0 [ 189.746499][ T8522] start_kernel+0x2c0/0x4e0 [ 189.746516][ T8522] x86_64_start_reservations+0x2a/0x30 [ 189.746532][ T8522] copy_bootdata+0x0/0xe0 [ 189.746548][ T8522] secondary_startup_64_no_verify+0x179/0x17b [ 189.746564][ T8522] [ 189.746564][ T8522] -> #0 (console_owner){-...}-{0:0}: [ 189.746583][ T8522] __lock_acquire+0x2ddb/0x7c80 [ 189.746597][ T8522] lock_acquire+0x197/0x410 [ 189.746610][ T8522] console_flush_all+0x693/0xd00 [ 189.746624][ T8522] console_unlock+0xae/0x340 [ 189.746638][ T8522] vprintk_emit+0x477/0x600 [ 189.746652][ T8522] _printk+0xd0/0x110 [ 189.746669][ T8522] should_fail_ex+0x37e/0x4d0 [ 189.746685][ T8522] strncpy_from_user+0x36/0x2e0 [ 189.746696][ T8522] strncpy_from_user_nofault+0x71/0x140 [ 189.746715][ T8522] bpf_probe_read_user_str+0x2a/0x70 [ 189.746735][ T8522] bpf_prog_bc7c5c6b9645592f+0x3d/0x3f [ 189.746752][ T8522] bpf_trace_run4+0x1f9/0x420 [ 189.746765][ T8522] __bpf_trace_sched_switch+0x17b/0x1e0 [ 189.746781][ T8522] __traceiter_sched_switch+0x93/0xc0 [ 189.746794][ T8522] __schedule+0x2197/0x44d0 [ 189.746809][ T8522] schedule+0xbd/0x170 [ 189.746821][ T8522] schedule_timeout+0x9b/0x280 [ 189.746845][ T8522] __wait_for_common+0x3cb/0x6d0 [ 189.746860][ T8522] wait_for_completion_state+0x1c/0x40 [ 189.746874][ T8522] call_usermodehelper_exec+0x3c0/0x490 [ 189.746894][ T8522] __request_module+0x3b1/0x5b0 [ 189.746906][ T8522] dev_load+0x18b/0x1f0 [ 189.746919][ T8522] dev_ioctl+0x865/0x1170 [ 189.746931][ T8522] sock_ioctl+0x726/0x7a0 [ 189.746949][ T8522] __se_sys_ioctl+0xfd/0x170 [ 189.746964][ T8522] do_syscall_64+0x55/0xb0 [ 189.746978][ T8522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.746998][ T8522] [ 189.746998][ T8522] other info that might help us debug this: [ 189.746998][ T8522] [ 189.747002][ T8522] Chain exists of: [ 189.747002][ T8522] console_owner --> &p->pi_lock --> &rq->__lock [ 189.747002][ T8522] [ 189.747023][ T8522] Possible unsafe locking scenario: [ 189.747023][ T8522] [ 189.747027][ T8522] CPU0 CPU1 [ 189.747031][ T8522] ---- ---- [ 189.747034][ T8522] lock(&rq->__lock); [ 189.747043][ T8522] lock(&p->pi_lock); [ 189.747052][ T8522] lock(&rq->__lock); [ 189.747062][ T8522] lock(console_owner); [ 189.747070][ T8522] [ 189.747070][ T8522] *** DEADLOCK *** [ 189.747070][ T8522] [ 189.747074][ T8522] 4 locks held by syz.0.1036/8522: [ 189.747082][ T8522] #0: ffff8880b8e3c458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 189.747122][ T8522] #1: ffffffff8cd2fbe0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0xfd/0x420 [ 189.747155][ T8522] #2: ffffffff8cd23f00 (console_lock){+.+.}-{0:0}, at: _printk+0xd0/0x110 [ 189.747193][ T8522] #3: ffffffff8cc0b710 (console_srcu){....}-{0:0}, at: console_flush_all+0x10f/0xd00 [ 189.747229][ T8522] [ 189.747229][ T8522] stack backtrace: [ 189.747234][ T8522] CPU: 0 PID: 8522 Comm: syz.0.1036 Not tainted 6.6.102-syzkaller #0 [ 189.747249][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.747258][ T8522] Call Trace: [ 189.747264][ T8522] [ 189.747272][ T8522] dump_stack_lvl+0x16c/0x230 [ 189.747290][ T8522] ? load_image+0x3b0/0x3b0 [ 189.747312][ T8522] ? show_regs_print_info+0x20/0x20 [ 189.747342][ T8522] ? print_circular_bug+0x12b/0x1a0 [ 189.747365][ T8522] check_noncircular+0x2bd/0x3c0 [ 189.747389][ T8522] ? print_deadlock_bug+0x5d0/0x5d0 [ 189.747404][ T8522] ? lockdep_lock+0xe0/0x220 [ 189.747440][ T8522] __lock_acquire+0x2ddb/0x7c80 [ 189.747493][ T8522] ? verify_lock_unused+0x140/0x140 [ 189.747540][ T8522] lock_acquire+0x197/0x410 [ 189.747556][ T8522] ? console_flush_all+0x10f/0xd00 [ 189.747584][ T8522] ? __lock_acquire+0x7c80/0x7c80 [ 189.747598][ T8522] ? do_raw_spin_lock+0x121/0x2c0 [ 189.747616][ T8522] ? read_lock_is_recursive+0x20/0x20 [ 189.747634][ T8522] ? __rwlock_init+0x150/0x150 [ 189.747657][ T8522] ? do_raw_spin_unlock+0x121/0x230 [ 189.747681][ T8522] console_flush_all+0x693/0xd00 [ 189.747697][ T8522] ? console_flush_all+0x10f/0xd00 [ 189.747719][ T8522] ? console_flush_all+0x10f/0xd00 [ 189.747754][ T8522] ? is_console_locked+0x20/0x20 [ 189.747773][ T8522] ? perf_tp_event+0x13a0/0x13a0 [ 189.747790][ T8522] ? tracing_gen_ctx_irq_test+0xbc/0x140 [ 189.747823][ T8522] console_unlock+0xae/0x340 [ 189.747855][ T8522] ? other_cpu_in_panic+0xf0/0xf0 [ 189.747875][ T8522] ? __lock_acquire+0x1260/0x7c80 [ 189.747903][ T8522] vprintk_emit+0x477/0x600 [ 189.747925][ T8522] ? printk_sprint+0x460/0x460 [ 189.747970][ T8522] _printk+0xd0/0x110 [ 189.748005][ T8522] ? load_image+0x3b0/0x3b0 [ 189.748045][ T8522] should_fail_ex+0x37e/0x4d0 [ 189.748071][ T8522] strncpy_from_user+0x36/0x2e0 [ 189.748093][ T8522] strncpy_from_user_nofault+0x71/0x140 [ 189.748118][ T8522] bpf_probe_read_user_str+0x2a/0x70 [ 189.748143][ T8522] bpf_prog_bc7c5c6b9645592f+0x3d/0x3f [ 189.748162][ T8522] bpf_trace_run4+0x1f9/0x420 [ 189.748178][ T8522] ? bpf_trace_run4+0xfd/0x420 [ 189.748191][ T8522] ? trace_event_raw_event_lock+0x230/0x230 [ 189.748213][ T8522] ? bpf_trace_run3+0x400/0x400 [ 189.748237][ T8522] ? __bpf_trace_sched_switch+0x160/0x1e0 [ 189.748263][ T8522] __bpf_trace_sched_switch+0x17b/0x1e0 [ 189.748286][ T8522] ? __bpf_trace_sched_wakeup_template+0xe0/0xe0 [ 189.748307][ T8522] ? __lock_acquire+0x7c20/0x7c80 [ 189.748325][ T8522] ? local_clock+0x20/0x20 [ 189.748356][ T8522] ? tracing_record_taskinfo_sched_switch+0x7d/0x360 [ 189.748378][ T8522] ? __bpf_trace_sched_wakeup_template+0xe0/0xe0 [ 189.748397][ T8522] __traceiter_sched_switch+0x93/0xc0 [ 189.748420][ T8522] __schedule+0x2197/0x44d0 [ 189.748451][ T8522] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 189.748477][ T8522] ? perf_trace_lock+0x2ed/0x380 [ 189.748500][ T8522] ? asan.module_dtor+0x20/0x20 [ 189.748522][ T8522] ? trace_event_raw_event_lock+0x230/0x230 [ 189.748566][ T8522] schedule+0xbd/0x170 [ 189.748585][ T8522] schedule_timeout+0x9b/0x280 [ 189.748605][ T8522] ? console_conditional_schedule+0x40/0x40 [ 189.748625][ T8522] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 189.748647][ T8522] ? lock_chain_count+0x20/0x20 [ 189.748660][ T8522] ? _raw_spin_lock_irq+0xaf/0xe0 [ 189.748681][ T8522] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 189.748706][ T8522] ? _raw_spin_unlock_irq+0x23/0x50 [ 189.748727][ T8522] ? lockdep_hardirqs_on+0x98/0x150 [ 189.748751][ T8522] __wait_for_common+0x3cb/0x6d0 [ 189.748770][ T8522] ? lock_chain_count+0x20/0x20 [ 189.748804][ T8522] ? console_conditional_schedule+0x40/0x40 [ 189.748826][ T8522] ? bit_wait_io_timeout+0x120/0x120 [ 189.748861][ T8522] ? __init_swait_queue_head+0xa9/0x150 [ 189.748882][ T8522] wait_for_completion_state+0x1c/0x40 [ 189.748899][ T8522] call_usermodehelper_exec+0x3c0/0x490 [ 189.748926][ T8522] ? call_usermodehelper_exec_work+0x220/0x220 [ 189.748947][ T8522] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 189.748984][ T8522] ? __request_module+0x5b0/0x5b0 [ 189.749005][ T8522] __request_module+0x3b1/0x5b0 [ 189.749029][ T8522] ? module_enforce_rwx_sections+0x150/0x150 [ 189.749050][ T8522] ? dev_load+0x21/0x1f0 [ 189.749076][ T8522] ? bpf_lsm_capable+0x9/0x10 [ 189.749105][ T8522] ? dev_load+0x21/0x1f0 [ 189.749120][ T8522] dev_load+0x18b/0x1f0 [ 189.749137][ T8522] dev_ioctl+0x865/0x1170 [ 189.749158][ T8522] sock_ioctl+0x726/0x7a0 [ 189.749184][ T8522] ? sock_poll+0x3d0/0x3d0 [ 189.749218][ T8522] ? bpf_lsm_file_ioctl+0x9/0x10 [ 189.749232][ T8522] ? security_file_ioctl+0x80/0xa0 [ 189.749253][ T8522] ? sock_poll+0x3d0/0x3d0 [ 189.749274][ T8522] __se_sys_ioctl+0xfd/0x170 [ 189.749297][ T8522] do_syscall_64+0x55/0xb0 [ 189.749312][ T8522] ? clear_bhb_loop+0x40/0x90 [ 189.749326][ T8522] ? clear_bhb_loop+0x40/0x90 [ 189.749343][ T8522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.749364][ T8522] RIP: 0033:0x7f221078ebe9 [ 189.749379][ T8522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.749392][ T8522] RSP: 002b:00007f2211573038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.749406][ T8522] RAX: ffffffffffffffda RBX: 00007f22109b5fa0 RCX: 00007f221078ebe9 [ 189.749417][ T8522] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000006 [ 189.749427][ T8522] RBP: 00007f2211573090 R08: 0000000000000000 R09: 0000000000000000 [ 189.749437][ T8522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.749446][ T8522] R13: 00007f22109b6038 R14: 00007f22109b5fa0 R15: 00007fffb51f7618 [ 189.749478][ T8522] [ 191.094845][ T8522] CPU: 0 PID: 8522 Comm: syz.0.1036 Not tainted 6.6.102-syzkaller #0 [ 191.103355][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 191.113598][ T8522] Call Trace: [ 191.117149][ T8522] [ 191.120201][ T8522] dump_stack_lvl+0x16c/0x230 [ 191.125071][ T8522] ? show_regs_print_info+0x20/0x20 [ 191.130458][ T8522] ? load_image+0x3b0/0x3b0 [ 191.135075][ T8522] should_fail_ex+0x39d/0x4d0 [ 191.140022][ T8522] strncpy_from_user+0x36/0x2e0 [ 191.144933][ T8522] strncpy_from_user_nofault+0x71/0x140 [ 191.150484][ T8522] bpf_probe_read_user_str+0x2a/0x70 [ 191.155865][ T8522] bpf_prog_bc7c5c6b9645592f+0x3d/0x3f [ 191.161317][ T8522] bpf_trace_run4+0x1f9/0x420 [ 191.166085][ T8522] ? bpf_trace_run4+0xfd/0x420 [ 191.170834][ T8522] ? trace_event_raw_event_lock+0x230/0x230 [ 191.176832][ T8522] ? bpf_trace_run3+0x400/0x400 [ 191.181687][ T8522] ? __bpf_trace_sched_switch+0x160/0x1e0 [ 191.187499][ T8522] __bpf_trace_sched_switch+0x17b/0x1e0 [ 191.193051][ T8522] ? __bpf_trace_sched_wakeup_template+0xe0/0xe0 [ 191.199888][ T8522] ? __lock_acquire+0x7c20/0x7c80 [ 191.204961][ T8522] ? local_clock+0x20/0x20 [ 191.209385][ T8522] ? tracing_record_taskinfo_sched_switch+0x7d/0x360 [ 191.216069][ T8522] ? __bpf_trace_sched_wakeup_template+0xe0/0xe0 [ 191.222530][ T8522] __traceiter_sched_switch+0x93/0xc0 [ 191.228137][ T8522] __schedule+0x2197/0x44d0 [ 191.232823][ T8522] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 191.238579][ T8522] ? perf_trace_lock+0x2ed/0x380 [ 191.243577][ T8522] ? asan.module_dtor+0x20/0x20 [ 191.248447][ T8522] ? trace_event_raw_event_lock+0x230/0x230 [ 191.254346][ T8522] schedule+0xbd/0x170 [ 191.258676][ T8522] schedule_timeout+0x9b/0x280 [ 191.263455][ T8522] ? console_conditional_schedule+0x40/0x40 [ 191.269379][ T8522] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 191.275374][ T8522] ? lock_chain_count+0x20/0x20 [ 191.280211][ T8522] ? _raw_spin_lock_irq+0xaf/0xe0 [ 191.285244][ T8522] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 191.290971][ T8522] ? _raw_spin_unlock_irq+0x23/0x50 [ 191.296297][ T8522] ? lockdep_hardirqs_on+0x98/0x150 [ 191.301962][ T8522] __wait_for_common+0x3cb/0x6d0 [ 191.306923][ T8522] ? lock_chain_count+0x20/0x20 [ 191.311908][ T8522] ? console_conditional_schedule+0x40/0x40 [ 191.317841][ T8522] ? bit_wait_io_timeout+0x120/0x120 [ 191.323124][ T8522] ? __init_swait_queue_head+0xa9/0x150 [ 191.328681][ T8522] wait_for_completion_state+0x1c/0x40 [ 191.334256][ T8522] call_usermodehelper_exec+0x3c0/0x490 [ 191.339850][ T8522] ? call_usermodehelper_exec_work+0x220/0x220 [ 191.346234][ T8522] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 191.352363][ T8522] ? __request_module+0x5b0/0x5b0 [ 191.357688][ T8522] __request_module+0x3b1/0x5b0 [ 191.362646][ T8522] ? module_enforce_rwx_sections+0x150/0x150 [ 191.368676][ T8522] ? dev_load+0x21/0x1f0 [ 191.373017][ T8522] ? bpf_lsm_capable+0x9/0x10 [ 191.377710][ T8522] ? dev_load+0x21/0x1f0 [ 191.381941][ T8522] dev_load+0x18b/0x1f0 [ 191.386102][ T8522] dev_ioctl+0x865/0x1170 [ 191.390423][ T8522] sock_ioctl+0x726/0x7a0 [ 191.395032][ T8522] ? sock_poll+0x3d0/0x3d0 [ 191.399462][ T8522] ? bpf_lsm_file_ioctl+0x9/0x10 [ 191.404612][ T8522] ? security_file_ioctl+0x80/0xa0 [ 191.409758][ T8522] ? sock_poll+0x3d0/0x3d0 [ 191.414272][ T8522] __se_sys_ioctl+0xfd/0x170 [ 191.418949][ T8522] do_syscall_64+0x55/0xb0 [ 191.423352][ T8522] ? clear_bhb_loop+0x40/0x90 [ 191.428335][ T8522] ? clear_bhb_loop+0x40/0x90 [ 191.433113][ T8522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.439027][ T8522] RIP: 0033:0x7f221078ebe9 [ 191.443452][ T8522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.463044][ T8522] RSP: 002b:00007f2211573038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.471478][ T8522] RAX: ffffffffffffffda RBX: 00007f22109b5fa0 RCX: 00007f221078ebe9 [ 191.479574][ T8522] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000006 [ 191.487559][ T8522] RBP: 00007f2211573090 R08: 0000000000000000 R09: 0000000000000000 [ 191.495805][ T8522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.504145][ T8522] R13: 00007f22109b6038 R14: 00007f22109b5fa0 R15: 00007fffb51f7618 [ 191.512282][ T8522] [ 194.606633][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.616419][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.681705][ T5796] Bluetooth: hci0: command 0x0406 tx timeout [ 196.681734][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 196.688302][ T5797] Bluetooth: hci2: command 0x0406 tx timeout [ 196.694954][ T5794] Bluetooth: hci3: command 0x0406 tx timeout